All vulnerabilities
CVE-2026-98676

Linux: iio: adc: ade9000: fix NULL pointer dereference in clkout registration

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in134aa31a8d4e71f6ab1d155ad7b4502508832f72Also 49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536aCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 134aa31a8d4e71f6ab1d155ad7b4502508832f72LinuxCVE List
  • 49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536aLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ade9000: fix NULL pointer dereference in clkout registration

ade9000_setup_clkout() passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls clk_divider_recalc_rate(), which dereferences the address through readl(). As a result, probing an ADE9000 configured as a clock provider with an external input clock crashes.

CLKOUT passes CLKIN through without changing its rate. Register it as a 1:1 fixed-factor clock, which does not require register access.

This change does not affect the configuration using the internal clock, for which the driver does not register a clock provider.

Text from CVE List

Affected versions 8

  • Linuxaffected: 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a before d2400175228fbc10b29c49a7b5f70a7e80d144ddCVE List
  • Linuxaffected: 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a before 134aa31a8d4e71f6ab1d155ad7b4502508832f72CVE List
  • Linuxaffected: 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a before 49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536aCVE List
  • Linuxaffected: 6.18CVE List
  • Linuxunaffected: all versions before 6.18CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3