CVE-2026-98676 PUBLISHED

iio: adc: ade9000: fix NULL pointer dereference in clkout registration

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ade9000: fix NULL pointer dereference in clkout registration

ade9000_setup_clkout() passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls clk_divider_recalc_rate(), which dereferences the address through readl(). As a result, probing an ADE9000 configured as a clock provider with an external input clock crashes.

CLKOUT passes CLKIN through without changing its rate. Register it as a 1:1 fixed-factor clock, which does not require register access.

This change does not affect the configuration using the internal clock, for which the driver does not register a clock provider.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a to d2400175228fbc10b29c49a7b5f70a7e80d144dd (excl.)
  • affected from 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a to 134aa31a8d4e71f6ab1d155ad7b4502508832f72 (excl.)
  • affected from 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a to 49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536a (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.18 is affected
  • unaffected from 0 to 6.18 (excl.)
  • unaffected from 6.18.56 to 6.18.* (incl.)
  • unaffected from 7.2.10 to 7.2.* (incl.)
  • unaffected from 7.3-rc6 to * (incl.)

References