-

CVE-2026-98660

iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

The sampling frequency tables store each frequency as an integer part and
a fractional part in micro units. num_sampling_freq_avail is initialized
to the number of flattened integer elements because read_avail() returns
the table as a flat array.

bmp280_write_sampling_frequency(), however, indexes the same table as a
two-dimensional array and uses num_sampling_freq_avail as the number of
rows. Convert the flattened element count back to the number of rows
before iterating over the table.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version < 05ef1af381a0f4556c7e3c0dc6bc2428d16c707e
Status affected
Version 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version < 9db6684fab228edd3b8861a172ccbce3236f027a
Status affected
Version 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version < 4fd5a61e61d6899cbd45728a5fceba49a53c222d
Status affected
Version 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version < 7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1
Status affected
Version 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Version < 56c423b233b214182c58c99861899327b45b0d6c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.1
Status affected
Version 0
Version < 6.1
Status unaffected
Version <= 6.6.*
Version 6.6.160
Status unaffected
Version <= 6.12.*
Version 6.12.113
Status unaffected
Version <= 6.18.*
Version 6.18.56
Status unaffected
Version <= 7.2.*
Version 7.2.10
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.092
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/9db6684fab228edd3b8861a172ccbce3236f027a
https://git.kernel.org/stable/c/4fd5a61e61d6899cbd45728a5fceba49a53c222d
https://git.kernel.org/stable/c/7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1
https://git.kernel.org/stable/c/56c423b233b214182c58c99861899327b45b0d6c
https://git.kernel.org/stable/c/05ef1af381a0f4556c7e3c0dc6bc2428d16c707e