Integer overflow in Linux kernel - CVE-2026-64497
Published: July 27, 2026
Vulnerability identifier: #VU139441
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64497
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause incorrect sensor data processing.
The vulnerability exists due to an integer sign-extension bug in the scd30_float_to_fp() function in the SCD30 IIO chemical sensor driver when converting floating-point sensor values. A local user can trigger the conversion of a crafted floating-point value to cause incorrect sensor data processing.
The issue affects the Linux kernel SCD30 sensor driver code path that converts device-provided floating-point values into fixed-point representation.
Affected software
Linux kernel
How to mitigate CVE-2026-64497
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/0ccff849bde90973e6c13a666f6ceab5c55b30d4
- https://git.kernel.org/stable/c/1821bcacd8ac5b214c53be16cbb8172bf193f0b6
- https://git.kernel.org/stable/c/40bb0fdb37f441c9c9f52bf58bbd8a0ca3cc9598
- https://git.kernel.org/stable/c/60d877910a43c305b5165131b258a17b1d772d57
- https://git.kernel.org/stable/c/82accdd57404399eddf3d56fd9beda7c61307388
- https://git.kernel.org/stable/c/8d4a46e971cf846bda98b20d4cabfa21c1276e5f
- https://git.kernel.org/stable/c/b131f0011dfef72350f4e3f11df94dc3e6b46065
- https://git.kernel.org/stable/c/d49ff54b2784aa56a7c97982de713604de89d23a