CVE-2026-98835
Linux: iio: accel: kionix-kx022a: Fix array boundary check
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in714d8f0b1c616a6a82be87ccb72271b6092773d1Also 87746be179dca4d94d73d5a323a39a87bb2e90fc, 4c73c1859fa64509aae7e23a6dbd2d5c8a64c05d and 2 moreCVE List
What fixes it
- 714d8f0b1c616a6a82be87ccb72271b6092773d1LinuxCVE List
- 87746be179dca4d94d73d5a323a39a87bb2e90fcLinuxCVE List
- 4c73c1859fa64509aae7e23a6dbd2d5c8a64c05dLinuxCVE List
- 22d377178de281d21ddf908d03a8e9fde3339d9fLinuxCVE List
- 0e65412aee4f651d2c9785f542a13e4b44002a75LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kionix-kx022a: Fix array boundary check
The driver performs a sanity check for an array size, when converting a register value to an array index. The check incorrectly accepts the sizeof(array) as a last index, when last valid index should be sizeof(array) - 1.
Fix the check by bailing out when index >= sizeof(array).
Text from CVE List
Affected versions 12
- Linuxaffected: 7c1d1677b3227c6b18ac999f2b84778baa280b8f before 714d8f0b1c616a6a82be87ccb72271b6092773d1CVE List
- Linuxaffected: 7c1d1677b3227c6b18ac999f2b84778baa280b8f before 87746be179dca4d94d73d5a323a39a87bb2e90fcCVE List
- Linuxaffected: 7c1d1677b3227c6b18ac999f2b84778baa280b8f before 4c73c1859fa64509aae7e23a6dbd2d5c8a64c05dCVE List
- Linuxaffected: 7c1d1677b3227c6b18ac999f2b84778baa280b8f before 22d377178de281d21ddf908d03a8e9fde3339d9fCVE List
- Linuxaffected: 7c1d1677b3227c6b18ac999f2b84778baa280b8f before 0e65412aee4f651d2c9785f542a13e4b44002a75CVE List
- Linuxaffected: 6.2CVE List
- Linuxunaffected: all versions before 6.2CVE List
- Linuxunaffected: 6.6.160 through 6.6.*CVE List
- Linuxunaffected: 6.12.113 through 6.12.*CVE List
- Linuxunaffected: 6.18.56 through 6.18.*CVE List
- Linuxunaffected: 7.2.10 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 5
- git.kernel.org/stable/c/714d8f0b1c616a6a82be87ccb72271b6092773d1Referencevia CVE List
- git.kernel.org/stable/c/87746be179dca4d94d73d5a323a39a87bb2e90fcReferencevia CVE List
- git.kernel.org/stable/c/4c73c1859fa64509aae7e23a6dbd2d5c8a64c05dReferencevia CVE List
- git.kernel.org/stable/c/22d377178de281d21ddf908d03a8e9fde3339d9fReferencevia CVE List
- git.kernel.org/stable/c/0e65412aee4f651d2c9785f542a13e4b44002a75Referencevia CVE List