Description
In the Linux kernel, the following vulnerability has been resolved:

iio: gyro: adis16260: fix division by zero in write_raw

Add a validation check for the sampling frequency value before using it
as a divisor. A user writing zero to the sampling_frequency sysfs
attribute triggers a division by zero in the kernel.
Published: 2026-07-19
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability leads to a division‑by‑zero error within the kernel’s handling of the adis16260 gyroscope driver when a user writes a zero value to the sampling_frequency sysfs attribute. This improper input causes a kernel crash, resulting in a denial of service where the affected system becomes unresponsive or requires a reboot. The flaw is a classic division‑by‑zero bug (CWE‑369) and does not directly enable code execution but can disrupt availability and potentially create a pivot for further attacks if the system remains unstable. The necessity for local write access to the sysfs interface is inferred from the description.

Affected Systems

The affected product is the Linux kernel. No specific kernel version is listed, but the issue resides in the iio gyro driver for the adis16260 device, which is part of the generic IIO subsystem used by many distributions. All Linux kernel builds that include this driver and do not apply the recent validation commit are vulnerable.

Risk and Exploitability

The EPSS score is reported as < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a very low probability of exploitation in the wild. Based on the description, it is inferred that an attacker must have local write access to the sampling_frequency sysfs attribute, typically available to root or potentially to privileged users. While the impact is significant (kernel crash), the limited exploit vector and low public exploitation likelihood moderate the overall risk for most environments. However, any system that exposes the adis16260 driver to local users remains at risk of denial of service if the attribute is abused.

Generated by OpenCVE AI on August 3, 2026 at 02:04 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the validation commit that checks for zero before division; this patch nullifies the divide‑by‑zero condition.
  • Ensure the sampling_frequency sysfs attribute accepts only non‑zero values by verifying the new kernel’s behavior; an attempt to write zero should be denied rather than cause a crash.
  • If an immediate kernel upgrade is not feasible, restrict write permissions on the sampling_frequency attribute so that only privileged users can modify it, and set a safe default non‑zero value to prevent accidental zero writes.

Generated by OpenCVE AI on August 3, 2026 at 02:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8593-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8603-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-8618-1 Linux kernel vulnerabilities
History

Sun, 26 Jul 2026 08:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-368

Wed, 22 Jul 2026 18:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-368

Wed, 22 Jul 2026 00:15:00 +0000


Sun, 19 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: fix division by zero in write_raw Add a validation check for the sampling frequency value before using it as a divisor. A user writing zero to the sampling_frequency sysfs attribute triggers a division by zero in the kernel.
Title iio: gyro: adis16260: fix division by zero in write_raw
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-19T14:55:32.071Z

Reserved: 2026-07-19T07:54:57.022Z

Link: CVE-2026-63933

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-63933 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T02:15:05Z

Weaknesses