What’s Vulnerable › Vulnerabilities

CVE-2026-98680: iio: accel: kionix-kx022a: Prevent memory leak and fix state

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-18 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022a_fifo_enable() at the buffer enable path, the allocated memory is never freed. Furthermore, the state information and previous hardware configuration(s) aren't undone, potentially leaving WMI interrupts and buffers enabled, or driver state flags wrong. Free the memory and revert the hardware configuration and state flags on error path.

Affected products

• Linux kernel: 6.7 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc
• https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260
• https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372
• https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0

Get alerted when CVE-2026-98680 or the next vulnerability affects your stack