CVE-2026-63935
In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc: fix division by zero in write_raw Add a validation check for the sampling frequency value before using it as a divisor. A user writing zero or a negative value to the sampling_frequency sysfs attribute triggers a division by zero in the kernel. Also prevent unsigned integer underflow when the computed cycle count is smaller than NXP_SAR_ADC_CONV_TIME, which would wrap the u32 inpsamp to a huge value.
Affected versions
Linux kernel versions
7.0
and later are affected. Fixed in
7.0.12,
7.1
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-63935?
CVE-2026-63935 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 7.0 onward and has been patched in 7.0.12 and 7.1. CVE-2026-63935 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-63935?
Yes — CVE-2026-63935 has been patched. Fixed versions include 7.0.12 and 7.1. If you are running Linux kernel 7.0 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-63935 actively exploited?
No — CVE-2026-63935 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.