CVE-2026-98658: Linux kernel · iio: proximity: aw96103: validate firmware data length
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 6501b032be217ecf47e793b78a05078cf0b604ad : patch Linux kernel soon.
Data as of 26 Oct 2026, 17:16 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 6501b032be217ecf47e793b78a05078cf0b604ad, 815ae0b73b69ace207b6bbf7ef428b06491c3ddb, 4a9b9f2d4e26589afd0ac099c8e5593170dd5ac7 +1
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 6501b032be217ecf47e793b78a05078cf0b604ad, 815ae0b73b69ace207b6bbf7ef428b06491c3ddb, 4a9b9f2d4e26589afd0ac099c8e5593170dd5ac7 or 1a7c522a35477d70320bd64aba8e9de0c1058c6f.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
The vulnerability has been fixed in Linux kernel version 6.12. Users and administrators should upgrade to version 6.12 or later to apply the official fix. No additional mitigation steps are required beyond applying the patch.
Description
A vulnerability in the Linux kernel's AW96103 proximity sensor driver allows improper validation of firmware data length. The firmware parser reads a length field from the binary header and uses it to process register/value entries. A truncated or malformed firmware image can cause the parser to read beyond the allocated buffer or interpret an underflowed length as a very large value, potentially leading to memory corruption.
References
- git.kernel.org/stable/c/4a9b9f2d4e26589afd0ac099c8e5593170dd5ac7 (opens in a new tab)
- git.kernel.org/stable/c/6501b032be217ecf47e793b78a05078cf0b604ad (opens in a new tab)
- git.kernel.org/stable/c/815ae0b73b69ace207b6bbf7ef428b06491c3ddb (opens in a new tab)
- git.kernel.org/stable/c/1a7c522a35477d70320bd64aba8e9de0c1058c6f (opens in a new tab)