{"api_version":"1","generated_at":"2026-11-11T08:47:37+00:00","cve":"CVE-2026-98680","urls":{"html":"https://cve.report/CVE-2026-98680","api":"https://cve.report/api/cve/CVE-2026-98680.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-98680","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-98680"},"summary":{"title":"iio: accel: kionix-kx022a: Prevent memory leak and fix state","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-10-18 16:17:21","updated_at":"2026-10-19 10:19:32"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc","name":"https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260","name":"https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372","name":"https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0","name":"https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98680","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98680","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e7123a4dfcd732c4d10620748588e3715f362802 e3bc345d08639e62b629e0ec0799f7fb45e21372 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e7123a4dfcd732c4d10620748588e3715f362802 5c7ca8fe72064c1c3c7a7418031f692bb2bff260 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e7123a4dfcd732c4d10620748588e3715f362802 2ef953f7b54e1460718116b4c0a4c63b106348fc git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e7123a4dfcd732c4d10620748588e3715f362802 e65e128b51a37dd1a9056ac3d1705d805a5c8bb0 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.7","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.7 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.113 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.56 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2.10 7.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.3 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/iio/accel/kionix-kx022a.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e3bc345d08639e62b629e0ec0799f7fb45e21372","status":"affected","version":"e7123a4dfcd732c4d10620748588e3715f362802","versionType":"git"},{"lessThan":"5c7ca8fe72064c1c3c7a7418031f692bb2bff260","status":"affected","version":"e7123a4dfcd732c4d10620748588e3715f362802","versionType":"git"},{"lessThan":"2ef953f7b54e1460718116b4c0a4c63b106348fc","status":"affected","version":"e7123a4dfcd732c4d10620748588e3715f362802","versionType":"git"},{"lessThan":"e65e128b51a37dd1a9056ac3d1705d805a5c8bb0","status":"affected","version":"e7123a4dfcd732c4d10620748588e3715f362802","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/iio/accel/kionix-kx022a.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.7"},{"lessThan":"6.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.113","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.56","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.3","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.113","versionStartIncluding":"6.7","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.56","versionStartIncluding":"6.7","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.10","versionStartIncluding":"6.7","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3","versionStartIncluding":"6.7","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path."}],"providerMetadata":{"dateUpdated":"2026-10-19T09:23:49.667Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372"},{"url":"https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260"},{"url":"https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc"},{"url":"https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0"}],"title":"iio: accel: kionix-kx022a: Prevent memory leak and fix state","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-98680","datePublished":"2026-10-18T15:45:39.927Z","dateReserved":"2026-09-25T10:25:14.364Z","dateUpdated":"2026-10-19T09:23:49.667Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-18 16:17:21","lastModifiedDate":"2026-10-19 10:19:32","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"98680","Ordinal":"1","Title":"iio: accel: kionix-kx022a: Prevent memory leak and fix state","CVE":"CVE-2026-98680","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"98680","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path.","Type":"Description","Title":"iio: accel: kionix-kx022a: Prevent memory leak and fix state"}]}}}