CVE-2026-98663iio: imu: adis16480: fix unprotected debugfs reads
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 9bf94f836e32ea168ec7448a523c11480317ad79 before b7e507c6da8875da93b4130c8185e82a9dfd565c; from 9bf94f836e32ea168ec7448a523c11480317ad79 before ce308ce18dedc18e9eeff8473892975e6fdd7aef; from 9bf94f836e32ea168ec7448a523c11480317ad79 before 396b83106f5e7d16467049f0caabd10533c01a0e; from 9bf94f836e32ea168ec7448a523c11480317ad79 before e1dea54496f90a62318cf4eeaa1e9ef8316e92b6 | CNA record |
References
- https://git.kernel.org/stable/c/b7e507c6da8875da93b4130c8185e82a9dfd565c
- https://git.kernel.org/stable/c/ce308ce18dedc18e9eeff8473892975e6fdd7aef
- https://git.kernel.org/stable/c/396b83106f5e7d16467049f0caabd10533c01a0e
- https://git.kernel.org/stable/c/e1dea54496f90a62318cf4eeaa1e9ef8316e92b6
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.