CVE-2026-98680

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98680", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.364Z", "datePublished": "2026-10-18T15:45:39.927Z", "dateUpdated": "2026-10-19T09:23:49.667Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:23:49.667Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/accel/kionix-kx022a.c"], "versions": [{"version": "e7123a4dfcd732c4d10620748588e3715f362802", "lessThan": "e3bc345d08639e62b629e0ec0799f7fb45e21372", "status": "affected", "versionType": "git"}, {"version": "e7123a4dfcd732c4d10620748588e3715f362802", "lessThan": "5c7ca8fe72064c1c3c7a7418031f692bb2bff260", "status": "affected", "versionType": "git"}, {"version": "e7123a4dfcd732c4d10620748588e3715f362802", "lessThan": "2ef953f7b54e1460718116b4c0a4c63b106348fc", "status": "affected", "versionType": "git"}, {"version": "e7123a4dfcd732c4d10620748588e3715f362802", "lessThan": "e65e128b51a37dd1a9056ac3d1705d805a5c8bb0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/accel/kionix-kx022a.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372"}, {"url": "https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260"}, {"url": "https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc"}, {"url": "https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0"}], "title": "iio: accel: kionix-kx022a: Prevent memory leak and fix state", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iio/accel/kionix-kx022a.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "e3bc345d08639e62b629e0ec0799f7fb45e21372", "status": "affected", "version": "e7123a4dfcd732c4d10620748588e3715f362802", "versionType": "git"}, {"lessThan": "5c7ca8fe72064c1c3c7a7418031f692bb2bff260", "status": "affected", "version": "e7123a4dfcd732c4d10620748588e3715f362802", "versionType": "git"}, {"lessThan": "2ef953f7b54e1460718116b4c0a4c63b106348fc", "status": "affected", "version": "e7123a4dfcd732c4d10620748588e3715f362802", "versionType": "git"}, {"lessThan": "e65e128b51a37dd1a9056ac3d1705d805a5c8bb0", "status": "affected", "version": "e7123a4dfcd732c4d10620748588e3715f362802", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iio/accel/kionix-kx022a.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"lessThan": "6.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path."}], "id": "CVE-2026-98680", "lastModified": "2026-10-19T10:19:32.447", "metrics": {}, "published": "2026-10-18T16:17:21.357", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: iio: accel: kionix-kx022a: Prevent memory leak and fix state", "id": "2555133", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555133"}, "csaw": false, "cvss3": {"cvss3_base_score": "1.9", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\niio: accel: kionix-kx022a: Prevent memory leak and fix state\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\nFree the memory and revert the hardware configuration and state flags on\nerror path.", "A flaw was found in the Linux kernel's Kionix KX022A accelerometer sensor driver. When enabling the device buffer fails during register configuration, the driver fails to properly free allocated memory or restore previous hardware states. A local user could trigger this error condition to cause a memory leak and leave the device in an inconsistent state, potentially leading to a Denial of Service (DoS) through resource exhaustion."], "name": "CVE-2026-98680", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98680\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98680\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98680.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e7123a4dfcd732c4d10620748588e3715f362802,e3bc345d08639e62b629e0ec0799f7fb45e21372)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e7123a4dfcd732c4d10620748588e3715f362802,5c7ca8fe72064c1c3c7a7418031f692bb2bff260)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e7123a4dfcd732c4d10620748588e3715f362802,2ef953f7b54e1460718116b4c0a4c63b106348fc)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e7123a4dfcd732c4d10620748588e3715f362802,e65e128b51a37dd1a9056ac3d1705d805a5c8bb0)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.56,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.10,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc6,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T19:00:11.976886+00:00", "updated": "2026-10-23T05:15:14.417591+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}