In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serial_number file… (CVE-2026-98666)

The Linux kernel vulnerability CVE-2026-98666 affects the iio gyro driver for the adis16136 sensor. The serial_number debugfs file operations were implemented without calling debugfs_file_get(), a requirement for debugfs_create_file_unsafe(). As a result, debugfs_remove_recursive() does not wait for any read operations in progress before unbinding the device, which frees the iio_dev structure underneath. This can lead to use-after-free conditions. The vulnerability has been resolved by switching to debugfs_create_file(), which properly manages file references and prevents premature freeing.

The vulnerability could allow a use-after-free condition during device unbinding due to unprotected debugfs reads. This may lead to kernel memory corruption or instability. No known exploits are reported in the wild. The impact is limited to local kernel operations involving the affected driver.

A fix is available that replaces debugfs_create_file_unsafe() with debugfs_create_file() in the affected driver code. Users should apply the official Linux kernel patches that address this issue. Since this is a kernel-level vulnerability, updating to a patched kernel version is the recommended remediation.