CVE-2026-98663

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98663
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98663.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98663
Downstream
Related
Published
2026-10-18T15:44:31Z
Modified
2026-11-04T14:27:29Z
Summary
iio: imu: adis16480: fix unprotected debugfs reads
Details

In the Linux kernel, the following vulnerability has been resolved:

iio: imu: adis16480: fix unprotected debugfs reads

The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it.

Use debugfs_create_file() instead.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98663.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9bf94f836e32ea168ec7448a523c11480317ad79
Fixed
8a7ff80c5cce57c65c105efd3a3e112edcce0e08
Fixed
cd2923032a9b8774e5a110c62c35919266387a2e
Fixed
ef4a716c51e19c2f2565d9993c110e5ecc3b3783
Fixed
8a782244972715c76bdaf8b662e9b22e260c5296
Fixed
b7e507c6da8875da93b4130c8185e82a9dfd565c
Fixed
ce308ce18dedc18e9eeff8473892975e6fdd7aef
Fixed
396b83106f5e7d16467049f0caabd10533c01a0e
Fixed
e1dea54496f90a62318cf4eeaa1e9ef8316e92b6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98663.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.16.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98663.json"