All vulnerabilities
CVE-2026-98663

Linux: iio: imu: adis16480: fix unprotected debugfs reads

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8a782244972715c76bdaf8b662e9b22e260c5296Also 396b83106f5e7d16467049f0caabd10533c01a0eCVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 8a782244972715c76bdaf8b662e9b22e260c5296LinuxCVE List
  • 396b83106f5e7d16467049f0caabd10533c01a0eLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: imu: adis16480: fix unprotected debugfs reads

The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it.

Use debugfs_create_file() instead.

Text from CVE List

Affected versions 12

  • Linuxaffected: 9bf94f836e32ea168ec7448a523c11480317ad79 before 8a782244972715c76bdaf8b662e9b22e260c5296CVE List
  • Linuxaffected: 9bf94f836e32ea168ec7448a523c11480317ad79 before b7e507c6da8875da93b4130c8185e82a9dfd565cCVE List
  • Linuxaffected: 9bf94f836e32ea168ec7448a523c11480317ad79 before ce308ce18dedc18e9eeff8473892975e6fdd7aefCVE List
  • Linuxaffected: 9bf94f836e32ea168ec7448a523c11480317ad79 before 396b83106f5e7d16467049f0caabd10533c01a0eCVE List
  • Linuxaffected: 9bf94f836e32ea168ec7448a523c11480317ad79 before e1dea54496f90a62318cf4eeaa1e9ef8316e92b6CVE List
  • Linuxaffected: 4.16CVE List
  • Linuxunaffected: all versions before 4.16CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5