{"id":"CVE-2026-98660","summary":"iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup","details":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup\n\nThe sampling frequency tables store each frequency as an integer part and\na fractional part in micro units. num_sampling_freq_avail is initialized\nto the number of flattened integer elements because read_avail() returns\nthe table as a flat array.\n\nbmp280_write_sampling_frequency(), however, indexes the same table as a\ntwo-dimensional array and uses num_sampling_freq_avail as the number of\nrows. Convert the flattened element count back to the number of rows\nbefore iterating over the table.","modified":"2026-10-19T02:47:03.982989756Z","published":"2026-10-18T15:44:19.707Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98660.json"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4fd5a61e61d6899cbd45728a5fceba49a53c222d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/56c423b233b214182c58c99861899327b45b0d6c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9db6684fab228edd3b8861a172ccbce3236f027a"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98660.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98660"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"10b40ffba2f95cdeed47b731c5ad5ecc73e140e8"},{"fixed":"9db6684fab228edd3b8861a172ccbce3236f027a"},{"fixed":"4fd5a61e61d6899cbd45728a5fceba49a53c222d"},{"fixed":"7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1"},{"fixed":"56c423b233b214182c58c99861899327b45b0d6c"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98660.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"fixed":"6.12.113"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.56"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98660.json"}}],"schema_version":"1.9.0"}