{"id":"CVE-2026-98680","kind":"vulnerability","aliases":["CVE-2026-98680"],"related":[],"title":"Linux kernel: kionix-kx022a accelerometer driver leaks memory on failed enable","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path.","summary":"When enabling the buffer on a Kionix KX022A accelerometer, a failed register write leaves the sample buffer allocated and the hardware configuration and driver state half-changed. The sources describe a memory leak and inconsistent state, not code execution or data exposure.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","iio","kionix-kx022a","linux-kernel","runtime"],"not_affected_if":["no-kx022a-hardware"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:21+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:19:14+00:00","updated_at":"2026-10-25T05:19:14+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-25T05:19:14Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: kionix-kx022a accelerometer driver leaks memory on failed enable","impact":"low","summary":"When enabling the buffer on a Kionix KX022A accelerometer, a failed register write leaves the sample buffer allocated and the hardware configuration and driver state half-changed. The sources describe a memory leak and inconsistent state, not code execution or data exposure.","category":"runtime","nicknames":[],"who_cares":["linux-kernel","iio","embedded","kionix-kx022a"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Kernel memory leaks and sensor state stays inconsistent after a failed enable","analyst_note":"","how_to_check":"- unknown","needs_analyst":false,"not_affected_if":["no-kx022a-hardware"],"who_is_affected":"Systems running a Linux kernel with the Kionix KX022A industrial IIO accelerometer driver (iio: accel: kionix-kx022a) in use, typically embedded or sensor hardware with that chip attached. Standard servers and desktops without this sensor are unlikely to be affected.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"low"},"cost_usd":0.000562,"input_tokens":3417,"output_tokens":441,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-98680':15A,18A 'accel':82C 'acceleromet':6A,36B 'alloc':45B,94C,117C 'aren':131C 'buffer':31B,44B,99C,113C,139C 'chang':55B 'code':66B 'configur':49B,129C,153C 'cve':13A,16A 'data':69B 'describ':58B 'driver':7A,51B,93C,142C 'embed':19B 'enabl':12A,29B,100C,110C,114C,140C 'error':158C 'execut':67B 'exposur':70B 'fail':11A,38B,105C 'fifo':109C 'fix':90C 'flag':144C,156C 'follow':76C 'free':146C 'freed':121C 'furthermor':122C 'half':54B 'half-chang':53B 'hardwar':48B,128C,152C 'iio':20B,81C 'inconsist':63B 'inform':125C 'interrupt':137C 'kernel':2A,26B,74C 'kionix':4A,22B,34B,84C 'kionix-kx022a':3A,21B,83C 'kx022a':5A,23B,35B,85C,108C 'leak':8A,61B,88C 'leav':41B,135C 'linux':1A,25B,73C 'linux-kernel':24B 'memori':9A,60B,87C,95C,118C,148C 'never':120C 'oper':104C 'path':101C,115C,159C 'potenti':134C 'prevent':86C 'previous':127C 'regist':39B 'regmap':103C 'resolv':80C 'revert':150C 'runtim':27B 'sampl':43B,97C 'sourc':57B 'state':52B,64B,91C,124C,143C,155C 'undon':133C 'vulner':77C 'wmi':136C 'write':40B 'wrong':145C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the Kionix KX022A industrial IIO accelerometer driver (iio: accel: kionix-kx022a) in use, typically embedded or sensor hardware with that chip attached. Standard servers and desktops without this sensor are unlikely to be affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:21+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98680","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98680","severity":null,"published_at":"2026-10-18T16:17:21+00:00","modified_at":"2026-10-19T10:19:32+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}