Skip to content
Heist/ feed
Back to feed
Unrated

CVE-2026-98672 affecting package kernel 6.6.157.1-1

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.

Products
kernel
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-98672
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 17:25 UTC · Revision 1

Source evidence

CVE-2026-98672 affecting package kernel 6.6.157.1-1

core-osv · Original source

Published 18 Oct 2026, 16:17 UTC

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.

osv:AZL-109221

kernel

Fixed versions: Not specified

Complete source record
{
  "id": "8a71f1f2cccc1849f0635408eb61a66e7853b8f2aba70a494bae8efe8fa1b445",
  "url": "https://osv.dev/vulnerability/AZL-109221",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2026-98672 affecting package kernel 6.6.157.1-1",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.",
    "evidence": "osv:AZL-109221",
    "products": [
      {
        "name": {
          "value": "kernel",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "AZL-109221",
      "aliases": [
        "AZL-109221"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "6.6.157.1-1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel",
            "purl": "pkg:rpm/azure-linux/kernel",
            "ecosystem": "Azure Linux:3"
          },
          "database_specific": {
            "source": "https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109221.json"
          }
        }
      ],
      "modified": "2026-10-27T05:36:16Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-98672"
      ],
      "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2026-98672"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-98672",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 460451,
  "published_at": "2026-10-18T16:17:20+00:00"
}