Strix
73.2K

CVE-2026-98656

UnknownEPSS 0.17%

Last modified

CVE-2026-98656 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_work before freeing trigger iio_trigger_notify_done_atomic() defers ->reenable() into trig->reenable_work on the system workqueue, and the worker dereferences the owning trigger through container_of(). Nothing cancels this work before iio_trig_release() frees the trigger, so a worker armed by the last in-flight IRQ can outlive the free and touch freed memory. Cancel it at the top of iio_trig_release(), which every free path reaches through the device core's final put_device(). Found by an in-house static analysis tool.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_work before freeing trigger iio_trigger_notify_done_atomic() defers ->reenable() into trig->reenable_work on the system workqueue, and the worker dereferences the owning trigger through container_of(). Nothing cancels this work before iio_trig_release() frees the trigger, so a worker armed by the last in-flight IRQ can outlive the free and touch freed memory. Cancel it at the top of iio_trig_release(), which every free path reaches through the device core's final put_device(). Found by an in-house static analysis tool.

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a18aeac73c0f692ba40964f5f56e182312ae843b, < beec4c9e23b8293c41d3448f9807c28fc9a599d4; >= 9020ef659885f2622cfb386cc229b6d618362895, < 4e790a5bd4249877bcf0c94db12ac490965f9296; >= 9020ef659885f2622cfb386cc229b6d618362895, < ac5d26a46c90ff61fd574eff4e8f0d71c905828a; >= 9020ef659885f2622cfb386cc229b6d618362895, < cf513df1a2c75566cdc802d9da47f62e8d6cfd18; >= 9020ef659885f2622cfb386cc229b6d618362895, < e64703280ce7a23a43c27efebeb7da457c88bf5c; >= 9020ef659885f2622cfb386cc229b6d618362895, < 882d0011c59ff8ac15188ec9ce071399ecfa10ad; >= 9020ef659885f2622cfb386cc229b6d618362895, < 2a57b9246cecd5dd797a42eb310d6c8816f26d9e; 2c5c948451d57596640b20887b06b523d376eb24; >= 5.15.17, < 5.15.224; >= 5.16.3, < 5.17
LinuxLinux5.17

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98656?
In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_work before freeing trigger iio_trigger_notify_done_atomic() defers ->reenable() into trig->reenable_work on the system workqueue, and the worker dereferences the owning trigger through container_of(). Nothing cancels this work before iio_trig_release() frees the trigger, so a worker armed by the last in-flight IRQ can outlive the free and touch freed memory. Cancel it at the top of iio_trig_release(), which every free path reaches through the device core's final put_device(). Found by an in-house static analysis tool.
How severe is CVE-2026-98656?
Severity scoring for CVE-2026-98656 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98656?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98656?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST