---
id: "CVE-2026-98680"
kind: "vulnerability"
aliases: ["CVE-2026-98680"]
title: "Linux kernel: kionix-kx022a accelerometer driver leaks memory on failed enable"
severity: "low"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["embedded", "iio", "kionix-kx022a", "linux-kernel", "runtime"]
not_affected_if: ["no-kx022a-hardware"]
published_at: "2026-10-18T16:17:21+00:00"
first_seen_at: "2026-10-23T21:57:16+00:00"
updated_at: "2026-10-25T05:19:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98680", "first_seen_at": "2026-10-23T21:57:16+00:00"}]
---

# Linux kernel: kionix-kx022a accelerometer driver leaks memory on failed enable

When enabling the buffer on a Kionix KX022A accelerometer, a failed register write leaves the sample buffer allocated and the hardware configuration and driver state half-changed. The sources describe a memory leak and inconsistent state, not code execution or data exposure.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98680

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: kionix-kx022a: Prevent memory leak and fix state

The driver allocates memory for samples at buffer enable path. If regmap
operation fails in the kx022a_fifo_enable() at the buffer enable path, the
allocated memory is never freed. Furthermore, the state information and
previous hardware configuration(s) aren't undone, potentially leaving
WMI interrupts and buffers enabled, or driver state flags wrong.

Free the memory and revert the hardware configuration and state flags on
error path.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_