CVE-2026-98680
Received
Received - Intake
Memory Leak in Linux Kernel IIO Accelerometer Driver
Vulnerability report for CVE-2026-98680, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-18
Last updated on: 2026-10-18
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kionix-kx022a: Prevent memory leak and fix state
The driver allocates memory for samples at buffer enable path. If regmap
operation fails in the kx022a_fifo_enable() at the buffer enable path, the
allocated memory is never freed. Furthermore, the state information and
previous hardware configuration(s) aren't undone, potentially leaving
WMI interrupts and buffers enabled, or driver state flags wrong.
Free the memory and revert the hardware configuration and state flags on
error path.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | e7123a4dfcd732c4d10620748588e3715f362802 |
| Linux | Linux | e7123a4dfcd732c4d10620748588e3715f362802 |
| Linux | Linux | e7123a4dfcd732c4d10620748588e3715f362802 |
| Linux | Linux | e7123a4dfcd732c4d10620748588e3715f362802 |
| Linux | Linux | 6.7 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
