Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund18 Oct 2026WID-SEC-2026-4019

  Linux Kernel: Multiple vulnerabilities Translated from German

  CVE-2026-98866CVE-2026-98624CVE-2026-98745+326 more CVEs

[ References ]References

• git.kernel.org/stable/c/30d27899cbba5b080954b5d3741bd535806c3101
• git.kernel.org/stable/c/55f1cebee909c9a0d5c2e494bcfaabed54750eb5
• git.kernel.org/stable/c/6dd3bf785d0307d1cf8f4a97c2240b0af14bef50
• git.kernel.org/stable/c/ab4e57adead252dd7f947baed6178f32ede88d38
• git.kernel.org/stable/c/c5de6a6f855fdcf1e0ea549fb227a316db51c405