In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The… (CVE-2026-98660)

The Linux kernel's bmp280 pressure sensor driver had a vulnerability where the sampling frequency lookup table was indexed incorrectly. The sampling frequency data is stored as a flattened array with integer and fractional parts. The variable num_sampling_freq_avail was initialized to the count of flattened elements, but the function bmp280_write_sampling_frequency() used it as if it represented the number of rows in a two-dimensional array. This mismatch led to out-of-bounds memory access. The fix involved converting the flattened element count back to the correct number of rows before iterating over the table, preventing invalid memory access.

This vulnerability could lead to out-of-bounds memory access in the Linux kernel's bmp280 driver, potentially causing kernel crashes or memory corruption. No known exploits are reported in the wild. The impact is limited to systems using the affected driver.

A fix for this vulnerability has been implemented in the Linux kernel by correcting the indexing logic in the bmp280 driver. Users should update their Linux kernel to a version that includes this fix once it is released. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for the current remediation guidance.