{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98673", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.363Z", "datePublished": "2026-10-18T15:45:27.705Z", "dateUpdated": "2026-10-19T09:23:42.843Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:23:42.843Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: pac1934: check ACPI label duplication\n\nA label duplication failure currently reaches the terminating-byte\nwrite. Release the ACPI result and abort before accessing the missing\nlabel; earlier labels are managed by devres.\n\nDetected by static analysis and reviewed with AI-assisted source auditing."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/adc/pac1934.c"], "versions": [{"version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "lessThan": "b7ac07d0b1a44bf644733298e80fd1f22e2f0cc1", "status": "affected", "versionType": "git"}, {"version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "lessThan": "2eb7f097e15dc8935b49402456d01f3ab68f3ddd", "status": "affected", "versionType": "git"}, {"version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "lessThan": "7996557c6b7d3b136668060057a790e058161dfe", "status": "affected", "versionType": "git"}, {"version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "lessThan": "64c82e7bd9c82b0c9276297df34a3579e8658f55", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/adc/pac1934.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/b7ac07d0b1a44bf644733298e80fd1f22e2f0cc1"}, {"url": "https://git.kernel.org/stable/c/2eb7f097e15dc8935b49402456d01f3ab68f3ddd"}, {"url": "https://git.kernel.org/stable/c/7996557c6b7d3b136668060057a790e058161dfe"}, {"url": "https://git.kernel.org/stable/c/64c82e7bd9c82b0c9276297df34a3579e8658f55"}], "title": "iio: adc: pac1934: check ACPI label duplication", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iio/adc/pac1934.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "b7ac07d0b1a44bf644733298e80fd1f22e2f0cc1", "status": "affected", "version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "versionType": "git"}, {"lessThan": "2eb7f097e15dc8935b49402456d01f3ab68f3ddd", "status": "affected", "version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "versionType": "git"}, {"lessThan": "7996557c6b7d3b136668060057a790e058161dfe", "status": "affected", "version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "versionType": "git"}, {"lessThan": "64c82e7bd9c82b0c9276297df34a3579e8658f55", "status": "affected", "version": "0fb528c8255bd2de6a2fba26ed28d75a7f0cb630", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iio/adc/pac1934.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"lessThan": "6.9", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: pac1934: check ACPI label duplication\n\nA label duplication failure currently reaches the terminating-byte\nwrite. Release the ACPI result and abort before accessing the missing\nlabel; earlier labels are managed by devres.\n\nDetected by static analysis and reviewed with AI-assisted source auditing."}], "id": "CVE-2026-98673", "lastModified": "2026-10-19T10:19:31.740", "metrics": {}, "published": "2026-10-18T16:17:20.650", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2eb7f097e15dc8935b49402456d01f3ab68f3ddd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/64c82e7bd9c82b0c9276297df34a3579e8658f55"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7996557c6b7d3b136668060057a790e058161dfe"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b7ac07d0b1a44bf644733298e80fd1f22e2f0cc1"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: iio: adc: pac1934: check ACPI label duplication", "id": "2555182", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555182"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\niio: adc: pac1934: check ACPI label duplication\nA label duplication failure currently reaches the terminating-byte\nwrite. Release the ACPI result and abort before accessing the missing\nlabel; earlier labels are managed by devres.\nDetected by static analysis and reviewed with AI-assisted source auditing.", "A flaw was found in the Linux kernel's PAC1934 driver. This vulnerability can result in a Denial of Service (DoS) due to a kernel crash caused by an invalid memory access. When the driver processes device configuration labels from the ACPI (Advanced Configuration and Power Interface) firmware tables, it does not verify whether memory allocation succeeded before attempting to write to the label buffer. Under memory-constrained conditions during device initialization, this missing check triggers a crash that halts the system."], "name": "CVE-2026-98673", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98673\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98673\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98673.mbox"], "threat_severity": "Moderate"}