Skip to main content
CVE-2026-98670VulnerabilityPublished Updated

Microsoft · iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-98670· Medium

Not known to be exploited · fixed in a29d385ad7b340c952a3935af2b33488db1eb3a6 : update Microsoft when convenient.

Data as of 28 Oct 2026, 09:44 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in a29d385ad7b340c952a3935af2b33488db1eb3a6, a5fe2d1b55faba6d00fd87ad491b6cb603046304, 012451d72c12293918617ff98cc737bedad21910 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • >=5.10.200 <5.11
Fixed in
  • a29d385ad7b340c952a3935af2b33488db1eb3a6
  • a5fe2d1b55faba6d00fd87ad491b6cb603046304
  • 012451d72c12293918617ff98cc737bedad21910
  • 49ea8a359e362bfbb32a647c8eb7962fbb37234e
  • 5.11
  • 0f3f427076240e75ff265e61645627a71ca4918c
LinuxLinuxAffected
  • =5.12
Fixed in–

Description

This vulnerability involves the iio: adc: xilinx-xadc driver in Microsoft products, where an IRQ is freed before cancelling the unmask worker on unbind. The issue affects versions 3.0 and 4.0 of the product. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…