CVE-2026-98678: Linux kernel · iio: adc: ad4030: fix invalid oversampling_ratio validation
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in d615210564205993e8f0e7ccb57cc2e66b7d5706 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 13:47 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in d615210564205993e8f0e7ccb57cc2e66b7d5706, 6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1, 6b0cc4e32599f59c994a60743f53fc72cb2979f4
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to d615210564205993e8f0e7ccb57cc2e66b7d5706, 6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1 or 6b0cc4e32599f59c994a60743f53fc72cb2979f4.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
This vulnerability has been fixed in the Linux kernel. Users should update from version 6.15 to a fixed version containing the relevant commits (e.g., d615210564205993e8f0e7ccb57cc2e66b7d5706 or later). No additional mitigation is required once the kernel is updated.
Description
A vulnerability in the Linux kernel's AD4030 ADC driver was fixed by correcting the validation of the oversampling_ratio parameter. The function ad4030_set_avg_frame_len() previously calculated a logarithm on the input before validating it, which could lead to undefined behavior if zero or negative values were passed. The fix ensures the input is strictly positive before computing the logarithm.