CVE-2026-98680: Linux kernel · iio: accel: kionix-kx022a: Prevent memory leak and fix state
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in e65e128b51a37dd1a9056ac3d1705d805a5c8bb0 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 13:47 UTC
Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in e65e128b51a37dd1a9056ac3d1705d805a5c8bb0, e3bc345d08639e62b629e0ec0799f7fb45e21372, 5c7ca8fe72064c1c3c7a7418031f692bb2bff260 +1
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to e65e128b51a37dd1a9056ac3d1705d805a5c8bb0, e3bc345d08639e62b629e0ec0799f7fb45e21372, 5c7ca8fe72064c1c3c7a7418031f692bb2bff260 or 2ef953f7b54e1460718116b4c0a4c63b106348fc.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix has been applied in the Linux kernel to free allocated memory and revert hardware configuration and state flags on error paths in the kionix-kx022a driver. Users should update to the fixed kernel versions identified by the commits e65e128b51a37dd1a9056ac3d1705d805a5c8bb0, e3bc345d08639e62b629e0ec0799f7fb45e21372, 5c7ca8fe72064c1c3c7a7418031f692bb2bff260, and 2ef953f7b54e1460718116b4c0a4c63b106348fc. No additional mitigation is required.
Description
A memory leak and improper state handling vulnerability was identified and fixed in the Linux kernel driver for the Kionix KX022A accelerometer. The issue occurs when regmap operations fail during buffer enabling, causing allocated memory not to be freed and hardware state not to be reverted. This could leave interrupts and buffers enabled incorrectly and driver state flags in an inconsistent state.
References
- git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372 (opens in a new tab)
- git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260 (opens in a new tab)
- git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc (opens in a new tab)
- git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0 (opens in a new tab)