In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not… (CVE-2026-98679)

The Linux kernel's IIO core did not filter duplicate writes to the event enable attribute for the kxcjk-1013 accelerometer. While repeated enable requests were ignored, repeated disable requests called kxcjk1013_set_power_state(data, false) unnecessarily, dropping a runtime PM reference that was not acquired for that request. This caused an underflow in the runtime PM usage count and triggered a "Runtime PM usage count underflow" warning. The fix involves returning early if the requested event enable state matches the current state, preventing the underflow condition.

The vulnerability causes a runtime power management usage count underflow warning in the Linux kernel, which may affect power management stability for the affected device driver. No direct code execution or privilege escalation impact is described. There is no indication of known exploits in the wild.

A fix has been applied to the Linux kernel to return early when the requested event enable state matches the current state, preventing the runtime PM usage count underflow. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.