CVE-2026-98666

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98666
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98666.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98666
Downstream
Related
Published
2026-10-18T15:44:43Z
Modified
2026-11-04T14:27:23Z
Summary
iio: gyro: adis16136: fix unprotected debugfs reads
Details

In the Linux kernel, the following vulnerability has been resolved:

iio: gyro: adis16136: fix unprotected debugfs reads

The serial_number file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it.

Use debugfs_create_file() instead.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98666.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2
Fixed
c325d98b824b61cf7761335c633bfac22ec8e85b
Fixed
c8cf798ad3ae0573e83c01c73228f5f46e54f1a0
Fixed
3558b125b034003b04e89d0d7b38733a08d3fc49
Fixed
b62c3944c006cff85dad881ba2948b2f3ef5a626
Fixed
d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5
Fixed
b53dc6e15aead039bc6a5e08060c96786240c81d
Fixed
b05e768420352d9051f86c1a1f20f44fa046ba45
Fixed
2b498df75d6c29aa3e760127ae0f0003df598b53

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98666.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.16.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98666.json"