In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. num sampling freq avail is initialized to the number of flattened integer elements because read avail() returns the table as a flat array.

bmp280 write sampling frequency(), however, indexes the same table as a two-dimensional array and uses num sampling freq avail as the number of rows. Convert the flattened element count back to the number of rows before iterating over the table.