---
id: CVE-2026-98835
title: 'iio: accel: kionix-kx022a: Fix array boundary check'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iio: accel: kionix-kx022a: Fix array boundary check

  The driver performs a sanity check for an array size, when converting a
  register value to an array index. The check…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f <
    87746be179dca4d94d73d5a323a39a87bb2e90fc
  - >-
    Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f <
    4c73c1859fa64509aae7e23a6dbd2d5c8a64c05d
  - >-
    Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f <
    22d377178de281d21ddf908d03a8e9fde3339d9f
  - >-
    Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f <
    0e65412aee4f651d2c9785f542a13e4b44002a75
  - Linux 6.2
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:49:48.676Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98835'
references:
  - url: 'https://git.kernel.org/stable/c/87746be179dca4d94d73d5a323a39a87bb2e90fc'
  - url: 'https://git.kernel.org/stable/c/4c73c1859fa64509aae7e23a6dbd2d5c8a64c05d'
  - url: 'https://git.kernel.org/stable/c/22d377178de281d21ddf908d03a8e9fde3339d9f'
  - url: 'https://git.kernel.org/stable/c/0e65412aee4f651d2c9785f542a13e4b44002a75'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.469Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: kionix-kx022a: Fix array boundary check

The driver performs a sanity check for an array size, when converting a
register value to an array index. The check incorrectly accepts the
sizeof(array) as a last index, when last valid index should be
sizeof(array) - 1.

Fix the check by bailing out when index >= sizeof(array).

## Affected

- `Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f < 87746be179dca4d94d73d5a323a39a87bb2e90fc`
- `Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f < 4c73c1859fa64509aae7e23a6dbd2d5c8a64c05d`
- `Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f < 22d377178de281d21ddf908d03a8e9fde3339d9f`
- `Linux >= 7c1d1677b3227c6b18ac999f2b84778baa280b8f < 0e65412aee4f651d2c9785f542a13e4b44002a75`
- `Linux 6.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.