-
CVE-2026-98660
- EPSS 0.2%
- Veröffentlicht 18.10.2026 15:44:19
- Zuletzt bearbeitet 21.10.2026 13:21:35
- Erkennungen
iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. num_sampling_freq_avail is initialized to the number of flattened integer elements because read_avail() returns the table as a flat array. bmp280_write_sampling_frequency(), however, indexes the same table as a two-dimensional array and uses num_sampling_freq_avail as the number of rows. Convert the flattened element count back to the number of rows before iterating over the table.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version <
05ef1af381a0f4556c7e3c0dc6bc2428d16c707e
Status
affected
Version
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version <
9db6684fab228edd3b8861a172ccbce3236f027a
Status
affected
Version
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version <
4fd5a61e61d6899cbd45728a5fceba49a53c222d
Status
affected
Version
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version <
7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1
Status
affected
Version
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version <
56c423b233b214182c58c99861899327b45b0d6c
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.1
Status
affected
Version
0
Version <
6.1
Status
unaffected
Version <=
6.6.*
Version
6.6.160
Status
unaffected
Version <=
6.12.*
Version
6.12.113
Status
unaffected
Version <=
6.18.*
Version
6.18.56
Status
unaffected
Version <=
7.2.*
Version
7.2.10
Status
unaffected
Version <=
*
Version
7.3
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.092 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/9db6684fab228edd3b8861a172ccbce3236f027a
https://git.kernel.org/stable/c/4fd5a61e61d6899cbd45728a5fceba49a53c222d
https://git.kernel.org/stable/c/7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1
https://git.kernel.org/stable/c/56c423b233b214182c58c99861899327b45b0d6c
https://git.kernel.org/stable/c/05ef1af381a0f4556c7e3c0dc6bc2428d16c707e