CVE-2026-98679iio: accel: kxcjk-1013: reject duplicate event disable
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from b4b491c0832ef90a7a5070e5975bc8427f2049ca before ad690c0c1b9131725619e352cb7c970488cbf436; from b4b491c0832ef90a7a5070e5975bc8427f2049ca before 3365209e758c845a197211645731f0e393a86012; from b4b491c0832ef90a7a5070e5975bc8427f2049ca before aa94a37b5a3e560c277dac6f9e5d0d75549a6583; from b4b491c0832ef90a7a5070e5975bc8427f2049ca before dd30c10ff60d2b30386c23bb7c61cc97f2385c97 | CNA record |
References
- https://git.kernel.org/stable/c/ad690c0c1b9131725619e352cb7c970488cbf436
- https://git.kernel.org/stable/c/3365209e758c845a197211645731f0e393a86012
- https://git.kernel.org/stable/c/aa94a37b5a3e560c277dac6f9e5d0d75549a6583
- https://git.kernel.org/stable/c/dd30c10ff60d2b30386c23bb7c61cc97f2385c97
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.