CVE-2026-98679

Received Received - Intake

IIO Event Disable Underflow in kxcjk-1013 Driver

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98679

EUVD

EUVD-2026-103933

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	b4b491c0832ef90a7a5070e5975bc8427f2049ca
Linux	Linux	b4b491c0832ef90a7a5070e5975bc8427f2049ca
Linux	Linux	b4b491c0832ef90a7a5070e5975bc8427f2049ca
Linux	Linux	b4b491c0832ef90a7a5070e5975bc8427f2049ca
Linux	Linux	3.18

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the IIO core not filtering duplicate writes to the event enable attribute in the kxcjk-1013 accelerometer driver. Repeated disable requests incorrectly drop a runtime PM reference that was never acquired, causing a runtime PM usage count underflow and triggering a warning.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO accelerometer driver (kxcjk-1013). Detection requires checking kernel logs for 'Runtime PM usage count underflow' warnings or inspecting the kxcjk-1013 driver code for duplicate event disable calls. No direct network detection commands are applicable.

Impact Analysis

This vulnerability may cause system instability or crashes due to runtime PM usage count underflow warnings. It could lead to unexpected behavior in systems using the kxcjk-1013 accelerometer driver, potentially disrupting functionality of devices relying on this hardware.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level Linux kernel issue related to runtime power management underflow. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for this vulnerability. Monitor kernel logs for 'Runtime PM usage count underflow' warnings. If using a custom kernel, patch the kxcjk-1013 driver to reject duplicate event disable requests.

Hi! I’m here to help you understand CVE-2026-98679. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70