CVE-2026-98675 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

Not scored Published 18 Oct 2026 Updated 19 Oct 2026

The ADE9000 ADC driver failed to report Phase C dip events due to an incorrect scan limit, potentially affecting power monitoring accuracy.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-98675?

CVE-2026-98675 is a vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

ADE9000_ST1_CROSSING_DEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000_ST1_DIPC_BIT (bit 25). Phase C dip events were never reported.

Bump the value to 26 so bit 25 is scanned.

Which versions are affected by CVE-2026-98675?

How do I fix CVE-2026-98675?

Apply the vendor's patch.

Is CVE-2026-98675 being exploited?

There is no known exploitation of CVE-2026-98675 in the wild and no public exploit code.

Sources

Also known as BELL-CVE-2026-98675, DEBIAN-CVE-2026-98675, GHSA-qpvq-cwgm-ghf8, UBUNTU-CVE-2026-98675.