CVE-2026-98680

medium

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022a_fifo_enable() at the buffer enable path, the allocated memory is never freed. Furthermore, the state information and previous hardware configuration(s) aren't undone, potentially leaving WMI interrupts and buffers enabled, or driver state flags wrong. Free the memory and revert the hardware configuration and state flags on error path.

References

https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0

https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372

https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260

https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103934

Details

Source: Mitre, NVD

Published: 2026-10-18

Updated: 2026-10-19

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00168