CVE-2026-63935
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
27/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iio: adc: nxp-sar-adc: fix division by zero in write_raw<br />
<br />
Add a validation check for the sampling frequency value before using it<br />
as a divisor. A user writing zero or a negative value to the<br />
sampling_frequency sysfs attribute triggers a division by zero in the<br />
kernel.<br />
<br />
Also prevent unsigned integer underflow when the computed cycle count is<br />
smaller than NXP_SAR_ADC_CONV_TIME, which would wrap the u32 inpsamp to<br />
a huge value.


