Strix
73.3K

CVE-2026-98679

UnknownEPSS 0.17%

Last modified

CVE-2026-98679 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < b33dfdc0f22dd6c9cb9ae34a32723ef0a5d2ccf5; >= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < 8c6d1abaff5dbbe2d2b7529de7f1f2395a2f07e9; >= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < 2f9f88da802733bab7a87a0e685c8cfa7488f6ac; >= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < 137c35cff4d4d69f73cbfc0bf7870bf379a7a364; >= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < ad690c0c1b9131725619e352cb7c970488cbf436; >= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < 3365209e758c845a197211645731f0e393a86012; >= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < aa94a37b5a3e560c277dac6f9e5d0d75549a6583; >= b4b491c0832ef90a7a5070e5975bc8427f2049ca, < dd30c10ff60d2b30386c23bb7c61cc97f2385c97
LinuxLinux3.18

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98679?
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.
How severe is CVE-2026-98679?
Severity scoring for CVE-2026-98679 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98679?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98679?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST