{
  "cveId": "CVE-2026-98678",
  "url": "https://patchblox.com/security/cve/CVE-2026-98678",
  "summary": "CVE-2026-98678 is fixed in linux on 1 platform by DEBIAN-CVE-2026-98678 (version 7.2.10-1), released October 19, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "iio: adc: ad4030: fix invalid oversampling_ratio validation",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  iio: adc: ad4030: fix invalid oversampling_ratio validation  In ad4030_set_avg_frame_len(), the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2().  Validate that the input is strictly positive prior to computing its logarithm.",
  "published": "2026-10-18T16:17:21Z",
  "severity": "",
  "epss": 0.00166,
  "epssPercentile": 0.05888,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98678",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.10-1",
      "fix": "DEBIAN-CVE-2026-98678",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98678",
      "released": "2026-10-19T16:27:52Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}