Strix
73.2K

CVE-2026-98663

UnknownEPSS 0.17%

Last modified

CVE-2026-98663 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 9bf94f836e32ea168ec7448a523c11480317ad79, < 8a7ff80c5cce57c65c105efd3a3e112edcce0e08; >= 9bf94f836e32ea168ec7448a523c11480317ad79, < cd2923032a9b8774e5a110c62c35919266387a2e; >= 9bf94f836e32ea168ec7448a523c11480317ad79, < ef4a716c51e19c2f2565d9993c110e5ecc3b3783; >= 9bf94f836e32ea168ec7448a523c11480317ad79, < 8a782244972715c76bdaf8b662e9b22e260c5296; >= 9bf94f836e32ea168ec7448a523c11480317ad79, < b7e507c6da8875da93b4130c8185e82a9dfd565c; >= 9bf94f836e32ea168ec7448a523c11480317ad79, < ce308ce18dedc18e9eeff8473892975e6fdd7aef; >= 9bf94f836e32ea168ec7448a523c11480317ad79, < 396b83106f5e7d16467049f0caabd10533c01a0e; >= 9bf94f836e32ea168ec7448a523c11480317ad79, < e1dea54496f90a62318cf4eeaa1e9ef8316e92b6
LinuxLinux4.16

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98663?
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.
How severe is CVE-2026-98663?
Severity scoring for CVE-2026-98663 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98663?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98663?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST