---
id: CVE-2026-98678
title: 'iio: adc: ad4030: fix invalid oversampling_ratio validation'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iio: adc: ad4030: fix invalid oversampling_ratio validation

  In ad4030_set_avg_frame_len(), the logarithm is calculated before input
  validation. Passing zero or negativ…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 <
    6b0cc4e32599f59c994a60743f53fc72cb2979f4
  - >-
    Linux >= 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 <
    6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1
  - >-
    Linux >= 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 <
    d615210564205993e8f0e7ccb57cc2e66b7d5706
  - Linux 6.15
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:45:35.605Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98678'
references:
  - url: 'https://git.kernel.org/stable/c/6b0cc4e32599f59c994a60743f53fc72cb2979f4'
  - url: 'https://git.kernel.org/stable/c/6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1'
  - url: 'https://git.kernel.org/stable/c/d615210564205993e8f0e7ccb57cc2e66b7d5706'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.530Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad4030: fix invalid oversampling_ratio validation

In ad4030_set_avg_frame_len(), the logarithm is calculated before input
validation. Passing zero or negative values leads to an undefined result
from ilog2().

Validate that the input is strictly positive prior to computing its
logarithm.

## Affected

- `Linux >= 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 < 6b0cc4e32599f59c994a60743f53fc72cb2979f4`
- `Linux >= 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 < 6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1`
- `Linux >= 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 < d615210564205993e8f0e7ccb57cc2e66b7d5706`
- `Linux 6.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.