Cloudanix VulnDB

CVE-2026-98673

None

CVSS

—

EPSS

0.2%

Published

Oct 18, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A bug in how certain Linux systems read hardware sensor labels could cause crashes or errors when starting up, and updating the operating system fixes it.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Moderate
Impact
Denial Of Service
Component
OS kernel
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The flaw permits an ACPI label duplication error path to reach a terminating-byte write without releasing the ACPI result buffer or aborting, allowing subsequent access to an uninitialized or missing label managed by devres.

Why it matters to the business

Linux systems using PAC1934 ADC hardware may experience kernel instability or crashes during device initialization, disrupting sensor-dependent workloads in embedded and server environments.

How an attack unfolds

An attacker supplies a crafted ACPI table containing duplicate labels for the pac1934 device; during probe the unhandled duplication reaches the write path, triggering invalid memory access or kernel fault.

How to fix it

Apply the upstream kernel patch that adds the duplication check, releases the ACPI result, and aborts early; rebuild and deploy updated kernels to all affected systems.

How to confirm the fix worked

Inspect kernel source for the added label-duplication check and early abort before the terminating-byte write; boot test systems with duplicate-label ACPI tables and confirm clean probe without faults.

Typical attack path

  1. Craft malicious ACPI tables with duplicate device labels
  2. Load tables on a system with the vulnerable pac1934 driver
  3. Trigger driver probe via device enumeration or module load
  4. Observe kernel fault or continued execution with corrupted state

How to detect it

Review kernel logs for ACPI or iio driver probe failures mentioning pac1934 or label handling; correlate with dmesg entries around device initialization.

What your security team should do

  • Prioritize kernel updates containing the pac1934 ACPI label fix within standard patching windows
  • Monitor upstream stable branches for backports of the static-analysis fix
  • Limit exposure by restricting untrusted ACPI table loading until patched

The record

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres. Detected by static analysis and reviewed with AI-assisted source auditing.

Affected packages

Ecosystem Package Introduced Fixed