---
id: CVE-2026-98666
title: 'iio: gyro: adis16136: fix unprotected debugfs reads'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iio: gyro: adis16136: fix unprotected debugfs reads

  The serial_number file operations are open coded and never call
  debugfs_file_get(), which debugfs_create_file_unsaf…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 <
    d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5
  - >-
    Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 <
    b53dc6e15aead039bc6a5e08060c96786240c81d
  - >-
    Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 <
    b05e768420352d9051f86c1a1f20f44fa046ba45
  - >-
    Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 <
    2b498df75d6c29aa3e760127ae0f0003df598b53
  - Linux 4.16
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:44:43.803Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98666'
references:
  - url: 'https://git.kernel.org/stable/c/d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5'
  - url: 'https://git.kernel.org/stable/c/b53dc6e15aead039bc6a5e08060c96786240c81d'
  - url: 'https://git.kernel.org/stable/c/b05e768420352d9051f86c1a1f20f44fa046ba45'
  - url: 'https://git.kernel.org/stable/c/2b498df75d6c29aa3e760127ae0f0003df598b53'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.534Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iio: gyro: adis16136: fix unprotected debugfs reads

The serial_number file operations are open coded and never call
debugfs_file_get(), which debugfs_create_file_unsafe() requires.
debugfs_remove_recursive() therefore does not wait for a read in
progress, and unbind frees the iio_dev underneath it.

Use debugfs_create_file() instead.

## Affected

- `Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5`
- `Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < b53dc6e15aead039bc6a5e08060c96786240c81d`
- `Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < b05e768420352d9051f86c1a1f20f44fa046ba45`
- `Linux >= 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < 2b498df75d6c29aa3e760127ae0f0003df598b53`
- `Linux 4.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.