SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63931

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's IIO (Industrial I/O) subsystem, specifically in the handling of the SCD30 chemical sensor, where a division by zero can occur if a user sets the sampling frequency to zero. This flaw could lead to a kernel crash or denial of service, impacting system stability. Organizations utilizing Linux systems with the IIO subsystem, particularly those integrating the SCD30 sensor, should prioritize applying the fix to mitigate potential disruptions.

CVE
CVE-2026-63931
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write_raw Add a zero check for val2 before using it as a divisor when setting the sampling frequency. A user writing a zero fractional part to the sampling_frequency sysfs attribute triggers a division by zero in the kernel.