Vulnerability in Linux
CVE-2026-63935
In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc: fix division by zero in write_raw Add a validation check for the sampling frequency value before using it as a divisor. A user writing zero or a negative value to the sampling_frequency sysfs attribute triggers a division by zero in the kernel. Also prevent unsigned integer underflow when the computed cycle count is smaller than NXP_SAR_ADC_CONV_TIME, which would wrap the u32 inpsamp to a huge value.
EPSS: 0.002 (8.6th percentile) — read the EPSS interpretation.
Affected products
- Linux — versions 4434072a893e4864519c167947083ff3e4cc2d95, 7.0, 0