In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure… (CVE-2026-98673)

The Linux kernel's iio adc pac1934 driver had a vulnerability involving improper handling of ACPI label duplication. Specifically, a failure in label duplication checking could cause the code to proceed to a terminating-byte write even when a label was missing. The fix involves releasing the ACPI result and aborting the operation before accessing any missing label, while earlier labels are managed by devres. This vulnerability was identified by static analysis and confirmed through AI-assisted source code auditing.

The vulnerability could cause improper handling of ACPI labels in the pac1934 driver, potentially leading to incorrect behavior or kernel errors when duplicate labels are present. No information about exploitation or direct impact such as privilege escalation or denial of service is provided.

A fix has been applied to the Linux kernel to address this vulnerability by properly checking for ACPI label duplication and aborting before accessing missing labels. Users should update to the fixed kernel version once available. Patch status is not explicitly stated in the provided data; check the official Linux kernel advisories for the exact fixed versions and remediation details.