In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and… (CVE-2026-98663)

The Linux kernel's iio: imu: adis16480 driver had a vulnerability where the firmware_revision and firmware_date debugfs file operations were implemented without calling debugfs_file_get(), which is required by debugfs_create_file_unsafe(). As a result, debugfs_remove_recursive() did not wait for reads in progress before unbinding and freeing the iio_dev device, potentially causing use-after-free conditions. The fix involved switching to debugfs_create_file(), which properly manages file references and prevents premature freeing.

This vulnerability could cause a use-after-free condition in the kernel when debugfs files are read concurrently with device unbinding, potentially leading to kernel instability or crashes. No known exploits in the wild have been reported.

A fix is available and has been applied in the Linux kernel by replacing debugfs_create_file_unsafe() with debugfs_create_file() for the affected debugfs file operations. Users should update to the fixed kernel version once available.