CVE intelligence
CVE-2026-98678
Vulnerability intelligence
Published Oct 18, 2026 Sources checked Oct 21, 2026
N/A CVSS not listed Score unavailable
What this means
Review the available evidence
CVE-2026-98678. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CISA KEV Not listed Based on the latest collected catalog
EPSS 0.2% Estimated 30-day exploitation probability
Ransomware use Not marked CISA KEV ransomware field
Threat actors 0 Source-linked actor relationships
Overview
What is CVE-2026-98678? In the Linux kernel, the following vulnerability has been resolved:
iio: adc: ad4030: fix invalid oversampling_ratio validation
In ad4030_set_avg_frame_len(), the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2().
Validate that the input is strictly positive prior to computing its logarithm.
Source: NVD
Sources Check the original records SecurityAlert keeps CVSS, KEV, EPSS, vendor guidance, and actor links separate so you can see where each fact came from.