CVE-2026-63931 - Vulnerability Details

- iio: chemical: scd30: fix division by zero in write_raw

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: chemical: scd30: fix division by zero in write_raw

Add a zero check for val2 before using it as a divisor when setting the
sampling frequency. A user writing a zero fractional part to the
sampling_frequency sysfs attribute triggers a division by zero in the
kernel.

Published: 2026-07-19

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A missing zero check in the scd30 driver’s write_raw function causes a division by zero when a user writes a zero fractional part to the sampling_frequency sysfs attribute. This flaw, identified as CWE-369 (division by zero), can compromise system availability by potentially triggering a kernel panic.

Affected Systems

Linux kernel builds that include the scd30 driver and expose the sampling_frequency sysfs attribute are affected. Any system running an unpatched driver could be impacted.

Risk and Exploitability

The EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog. The flaw is likely to be exploited locally by a user with write access to the sampling_frequency attribute, representing a local, permission‑restricted attack vector. Although the exploitation probability is low, the impact of a kernel crash is severe, making the overall risk noteworthy for environments where the sensor is continually accessed.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< 4748bce423a363bb8a85a624faeb8f54fe331611
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< 6308b812acdcac38cbfe1af0b1524c3375f408a5
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< c7a740bf75554b051fabb17596ca6e483d6e6d90
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< e85bc501947f5ae16dd9adc01162b76d55ab7962
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< d98c2e69aab905d1b19a69ffe584efa46a9efd42
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< 5e4d34092a5ebfbc3a45a180c76ecb1cdbbedd53
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< 2c50c017df97bfb425038efdfb8514c7bcd08564
`64b3d8b1b0f5c16c19045785e4da8391ae35ec99`	affected	< 5aba4f94b225617a55fed442a70329b2ee19c0a5

Linux

affected

Version	Status	Constraints
`5.9`	affected	—
`0`	unaffected	< 5.9
`5.10.259`	unaffected	≤ 5.10.*
`5.15.210`	unaffected	≤ 5.15.*
`6.1.176`	unaffected	≤ 6.1.*
`6.6.143`	unaffected	≤ 6.6.*
`6.12.93`	unaffected	≤ 6.12.*
`6.18.35`	unaffected	≤ 6.18.*
`7.0.12`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,4748bce423a363bb8a85a624faeb8f54fe331611)`	affected	code_commit	—
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,6308b812acdcac38cbfe1af0b1524c3375f408a5)`	affected	code_commit	—
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,c7a740bf75554b051fabb17596ca6e483d6e6d90)`	affected	code_commit	—
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,e85bc501947f5ae16dd9adc01162b76d55ab7962)`	affected	code_commit	—
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,d98c2e69aab905d1b19a69ffe584efa46a9efd42)`	affected	code_commit	—
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,5e4d34092a5ebfbc3a45a180c76ecb1cdbbedd53)`	affected	code_commit	—
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,2c50c017df97bfb425038efdfb8514c7bcd08564)`	affected	code_commit	—
`[64b3d8b1b0f5c16c19045785e4da8391ae35ec99,5aba4f94b225617a55fed442a70329b2ee19c0a5)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`5.9`	affected	generic	—
`[0,5.9)`	unaffected	generic	—
`[5.10.259,5.11.0)`	unaffected	semver	—
`[5.15.210,5.16.0)`	unaffected	semver	—
`[6.1.176,6.2.0)`	unaffected	semver	—
`[6.6.143,6.7.0)`	unaffected	semver	—
`[6.12.93,6.13.0)`	unaffected	semver	—
`[6.18.35,6.19.0)`	unaffected	semver	—
`[7.0.12,7.1.0)`	unaffected	semver	—
`[7.1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Update the Linux kernel to a version that includes the patch adding the zero check for val2
If an immediate kernel update is not possible, restrict write access to the sampling_frequency sysfs entry so that only privileged users can modify it
Monitor system logs for abnormal kernel panics or crashes that might indicate exploitation attempts

Generated by OpenCVE AI on August 4, 2026 at 06:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Ubuntu USN	USN-8593-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8603-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8618-1	Linux kernel vulnerabilities

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00211.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/2c50c017df97bfb425038efdfb8514c7bcd08564
https://git.kernel.org/stable/c/4748bce423a363bb8a85a624faeb8f54fe331611
https://git.kernel.org/stable/c/5aba4f94b225617a55fed442a70329b2ee19c0a5
https://git.kernel.org/stable/c/5e4d34092a5ebfbc3a45a180c76ecb1cdbbedd53
https://git.kernel.org/stable/c/6308b812acdcac38cbfe1af0b1524c3375f408a5
https://git.kernel.org/stable/c/c7a740bf75554b051fabb17596ca6e483d6e6d90
https://git.kernel.org/stable/c/d98c2e69aab905d1b19a69ffe584efa46a9efd42
https://git.kernel.org/stable/c/e85bc501947f5ae16dd9adc01162b76d55ab7962
https://lore.kernel.org/linux-cve-announce/2026071950-CVE-2026-63931-1154@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-63931
https://www.cve.org/CVERecord?id=CVE-2026-63931

History

Wed, 22 Jul 2026 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2026071950-CVE-2026-63931-1154@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-63931 https://www.cve.org/CVERecord?id=CVE-2026-63931

Tue, 21 Jul 2026 23:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-369

Sun, 19 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write_raw Add a zero check for val2 before using it as a divisor when setting the sampling frequency. A user writing a zero fractional part to the sampling_frequency sysfs attribute triggers a division by zero in the kernel.
Title		iio: chemical: scd30: fix division by zero in write_raw
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2c50c017df97bfb425038efdfb8514c7bcd08564 https://git.kernel.org/stable/c/4748bce423a363bb8a85a624faeb8f54fe331611 https://git.kernel.org/stable/c/5aba4f94b225617a55fed442a70329b2ee19c0a5 https://git.kernel.org/stable/c/5e4d34092a5ebfbc3a45a180c76ecb1cdbbedd53 https://git.kernel.org/stable/c/6308b812acdcac38cbfe1af0b1524c3375f408a5 https://git.kernel.org/stable/c/c7a740bf75554b051fabb17596ca6e483d6e6d90 https://git.kernel.org/stable/c/d98c2e69aab905d1b19a69ffe584efa46a9efd42 https://git.kernel.org/stable/c/e85bc501947f5ae16dd9adc01162b76d55ab7962

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-19T14:55:30.718Z

Updated: 2026-07-19T14:55:30.718Z

Reserved: 2026-07-19T07:54:57.021Z

Link: CVE-2026-63931

Vulnrichment

No data.

NVD

No data.

Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-63931 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-04T06:45:03Z

Weaknesses

CWE-369
Divide By Zero

Impact

Affected Systems

Risk and Exploitability

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object