CVE-2026-63935
kernel: iio: adc: nxp-sar-adc: fix division by zero in write_raw
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · October 31, 2026
Description
A flaw was found in the Linux kernel's NXP SAR Analog-to-Digital Converter (ADC) module. A local user can trigger a division-by-zero error by providing a zero or negative value to the sampling_frequency sysfs attribute. This vulnerability can lead to a denial of service (DoS) due to the kernel crashing. Additionally, an unsigned integer underflow can occur, potentially causing unexpected system behavior.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-369 · Divide By Zero