Live › vulnerability › CVE-2026-98680
Go to dashboardWhen enabling the buffer on a Kionix KX022A accelerometer, a failed register write leaves the sample buffer allocated and the hardware configuration and driver state half-changed. The sources describe a memory leak and inconsistent state, not code execution or data exposure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the Kionix KX022A industrial IIO accelerometer driver (iio: accel: kionix-kx022a) in use, typically embedded or sensor hardware with that chip attached. Standard servers and desktops without this sensor are unlikely to be affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kionix-kx022a: Prevent memory leak and fix state
The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022a_fifo_enable() at the buffer enable path, the allocated memory is never freed. Furthermore, the state information and previous hardware configuration(s) aren't undone, potentially leaving WMI interrupts and buffers enabled, or driver state flags wrong.
Free the memory and revert the hardware configuration and state flags on error path.
This page as .md · .json · in your agent: get_signal("CVE-2026-98680")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.