Not yet scoredPublished Oct 18, 2026

CVE-2026-98666iio: gyro: adis16136: fix unprotected debugfs reads

Updated under an hour ago (Oct 26, 2026, 3:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serial_number file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 18, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 before b62c3944c006cff85dad881ba2948b2f3ef5a626; from 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 before d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5; from 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 before b53dc6e15aead039bc6a5e08060c96786240c81d; from 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 before b05e768420352d9051f86c1a1f20f44fa046ba45; 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 builds before 2b498df75d6c29aa3e760127ae0f0003df598b53	CNA record

References

References

https://git.kernel.org/stable/c/b62c3944c006cff85dad881ba2948b2f3ef5a626
https://git.kernel.org/stable/c/d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5
https://git.kernel.org/stable/c/b53dc6e15aead039bc6a5e08060c96786240c81d
https://git.kernel.org/stable/c/b05e768420352d9051f86c1a1f20f44fa046ba45
https://git.kernel.org/stable/c/2b498df75d6c29aa3e760127ae0f0003df598b53

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.