Not yet scoredPublished Oct 18, 2026

CVE-2026-98663iio: imu: adis16480: fix unprotected debugfs reads

Updated under an hour ago (Oct 26, 2026, 9:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 18, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	9bf94f836e32ea168ec7448a523c11480317ad79 builds before 8a782244972715c76bdaf8b662e9b22e260c5296; from 9bf94f836e32ea168ec7448a523c11480317ad79 before b7e507c6da8875da93b4130c8185e82a9dfd565c; from 9bf94f836e32ea168ec7448a523c11480317ad79 before ce308ce18dedc18e9eeff8473892975e6fdd7aef; from 9bf94f836e32ea168ec7448a523c11480317ad79 before 396b83106f5e7d16467049f0caabd10533c01a0e; from 9bf94f836e32ea168ec7448a523c11480317ad79 before e1dea54496f90a62318cf4eeaa1e9ef8316e92b6	CNA record

References

References

https://git.kernel.org/stable/c/8a782244972715c76bdaf8b662e9b22e260c5296
https://git.kernel.org/stable/c/b7e507c6da8875da93b4130c8185e82a9dfd565c
https://git.kernel.org/stable/c/ce308ce18dedc18e9eeff8473892975e6fdd7aef
https://git.kernel.org/stable/c/396b83106f5e7d16467049f0caabd10533c01a0e
https://git.kernel.org/stable/c/e1dea54496f90a62318cf4eeaa1e9ef8316e92b6

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.