CVE-2026-98680iio: accel: kionix-kx022a: Prevent memory leak and fix state
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022a_fifo_enable() at the buffer enable path, the allocated memory is never freed. Furthermore, the state information and previous hardware configuration(s) aren't undone, potentially leaving WMI interrupts and buffers enabled, or driver state flags wrong. Free the memory and revert the hardware configuration and state flags on error path.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from e7123a4dfcd732c4d10620748588e3715f362802 before e3bc345d08639e62b629e0ec0799f7fb45e21372; from e7123a4dfcd732c4d10620748588e3715f362802 before 5c7ca8fe72064c1c3c7a7418031f692bb2bff260; from e7123a4dfcd732c4d10620748588e3715f362802 before 2ef953f7b54e1460718116b4c0a4c63b106348fc; from e7123a4dfcd732c4d10620748588e3715f362802 before e65e128b51a37dd1a9056ac3d1705d805a5c8bb0 | CNA record |
References
- https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372
- https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260
- https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc
- https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.