Executive brief
A vulnerability was identified in the Linux kernel's NXP SAR ADC driver, which manages certain analog-to-digital converters used in embedded systems. By providing an invalid sampling frequency, a local user could cause the system to crash or behave unpredictably. This could lead to a denial-of-service, impacting the availability of the device.
Technical details
A vulnerability exists in the nxp-sar-adc driver within the Industrial I/O (IIO) subsystem of the Linux kernel. The function nxp_sar_adc_write_raw fails to validate the 'val' parameter before using it as a divisor when a user writes to the sampling_frequency sysfs attribute. Providing a value of zero or a negative number results in a division by zero. Additionally, the driver lacked checks to prevent an unsigned integer underflow when the calculated cycle count was less than NXP_SAR_ADC_CONV_TIME. These issues can be triggered by a local user with access to the sysfs interface, leading to a kernel oops or denial of service. Patches have been merged into stable kernel branches to validate input and prevent underflow.
Affected products
- Linux Linux 7.0 to 7.0.12, 7.1
Timeline
- 2026-04-01: other: Patch authored
- 2026-07-19: advisory: CVE published