In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths… (CVE-2026-98674)
Description
A vulnerability in the Linux kernel's iio adc adi-axi-adc driver was resolved by initializing a previously uninitialized mutex. The issue involved the AXI ADC register access paths that serialize transactions using a lock which was not initialized during probe, potentially leading to improper synchronization.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's Industrial I/O (iio) ADC driver for the ADI AXI ADC hardware had a synchronization vulnerability due to the state mutex (st->lock) not being initialized during the probe phase. Although the AXI ADC register access paths serialize transactions with this lock, the lack of initialization could cause race conditions or inconsistent state. The vulnerability was resolved by initializing the mutex before registering the backend driver.
Potential Impact
The vulnerability could lead to improper serialization of register access transactions within the ADC driver, potentially causing race conditions or inconsistent hardware state. No specific exploitation details or impact scenarios are provided. There are no known exploits in the wild.
Mitigation Recommendations
A fix has been applied to initialize the state mutex before registering the backend driver. Users should update to the Linux kernel version that includes this fix. Since no patch links or affected versions are provided, consult the official Linux kernel advisories or repositories for the fixed version.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-ch3p-cm23-p6q5
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98674"]
Threat ID: 6ad520ad2cdf04f656993a4c
Added to database: 10/18/2026, 19:40:29 UTC
Last enriched: 10/18/2026, 21:49:00 UTC
Last updated: 10/19/2026, 00:48:11 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.