The Linux kernel's iio adc nxp-sar-adc driver had a vulnerability where the write_raw function did not validate the sampling_frequency input before using it as a divisor, leading to a division by zero if zero or negative values were provided. Furthermore, the driver did not prevent unsigned integer underflow when the computed cycle count was less than NXP_SAR_ADC_CONV_TIME, causing an unexpected wraparound of the u32 inpsamp variable. These issues have been fixed by adding appropriate validation checks.

The vulnerability could cause a kernel crash or instability due to division by zero or integer underflow in the kernel driver when invalid sampling frequency values are written. This may lead to denial of service or system instability. No information about privilege escalation or code execution is provided.

A fix has been implemented in the Linux kernel to add validation checks preventing division by zero and integer underflow in the nxp-sar-adc driver. Users should update to the fixed kernel version once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.