{"id":"CVE-2026-98680","title":"iio: accel: kionix-kx022a: Prevent memory leak and fix state","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fif…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < e3bc345d08639e62b629e0ec0799f7fb45e21372","Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < 5c7ca8fe72064c1c3c7a7418031f692bb2bff260","Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < 2ef953f7b54e1460718116b4c0a4c63b106348fc","Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < e65e128b51a37dd1a9056ac3d1705d805a5c8bb0","Linux 6.7"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:45:39.927Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98680","references":[{"url":"https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372"},{"url":"https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260"},{"url":"https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc"},{"url":"https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T16:47:32.529Z","slug":"CVE-2026-98680","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path.\n\n## Affected\n\n- `Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < e3bc345d08639e62b629e0ec0799f7fb45e21372`\n- `Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < 5c7ca8fe72064c1c3c7a7418031f692bb2bff260`\n- `Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < 2ef953f7b54e1460718116b4c0a4c63b106348fc`\n- `Linux >= e7123a4dfcd732c4d10620748588e3715f362802 < e65e128b51a37dd1a9056ac3d1705d805a5c8bb0`\n- `Linux 6.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}