Live › vulnerability › CVE-2026-98835
Go to dashboardThe kionix-kx022a industrial accelerometer driver in the Linux kernel accepts an index equal to the array size, reading one element past the end of an array. The sources do not describe an attacker-controlled path or a demonstrated impact beyond the out-of-bounds read.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only systems running a Linux kernel with the kionix-kx022a accelerometer driver compiled in or loaded, typically embedded or hardware devices with that sensor. General servers and cloud hosts without that hardware driver are unlikely to be exposed. The sources do not say how the register value reaches the driver.
No product ranges from the sources yet.
uname -r and check whether the kernel build includes the kionix-kx022a IIO driver (grep -i kx022a /boot/config-$(uname -r))Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kionix-kx022a: Fix array boundary check
The driver performs a sanity check for an array size, when converting a register value to an array index. The check incorrectly accepts the sizeof(array) as a last index, when last valid index should be sizeof(array) - 1.
Fix the check by bailing out when index >= sizeof(array).
This page as .md · .json · in your agent: get_signal("CVE-2026-98835")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.