CVE-2026-98663
Received Received - Intake

Unprotected Debugfs Reads in Linux Kernel IIO IMU Driver

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98663
EUVD
EUVD-2026-103917

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 9bf94f836e32ea168ec7448a523c11480317ad79
Linux Linux 9bf94f836e32ea168ec7448a523c11480317ad79
Linux Linux 9bf94f836e32ea168ec7448a523c11480317ad79
Linux Linux 9bf94f836e32ea168ec7448a523c11480317ad79
Linux Linux 4.16

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the IIO IMU driver for the ADIS16480 sensor. The issue is that two debugfs files (firmware_revision and firmware_date) were created using debugfs_create_file_unsafe() but did not call debugfs_file_get() as required. This means the debugfs system cannot properly track reads, leading to a race condition where unbind operations may free the iio_dev structure while a read is still in progress.

Impact Analysis

This vulnerability could cause system instability or crashes if an attacker triggers a debugfs read while the device is being unbound. It may lead to memory corruption or denial of service conditions on systems using the affected ADIS16480 sensor driver.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves the issue with debugfs reads in the adis16480 driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98663. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart