In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case… (CVE-2026-98672)

The Linux kernel's stm32-adc driver had a vulnerability where processing the ADC conversion result could lead to a division by zero if the conversion failed or returned zero. Specifically, the code did not verify that the converted value was non-zero before performing division operations on it. This could happen, for example, when reading the Vrefint channel, which may return zero and should be considered invalid. The fix involves adding error checks to ensure that zero or failed conversion values are not processed, preventing division by zero errors.

If unpatched, this vulnerability could cause a division by zero error in the kernel driver, potentially leading to kernel crashes or instability when processing ADC data from the stm32-adc driver. There is no indication of remote exploitation or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to address this issue by adding proper checks for zero or failed ADC conversion values before processing. Users should update to the fixed kernel version once available. Since this is a kernel-level fix, upgrading the kernel is the recommended remediation.