CVE-2026-98666

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-10-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serial_number file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.

Affected Software (9)

VendorProductVersion
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < c325d98b824b61cf7761335c633bfac22ec8e85b
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < c8cf798ad3ae0573e83c01c73228f5f46e54f1a0
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < 3558b125b034003b04e89d0d7b38733a08d3fc49
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < b62c3944c006cff85dad881ba2948b2f3ef5a626
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < b53dc6e15aead039bc6a5e08060c96786240c81d
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < b05e768420352d9051f86c1a1f20f44fa046ba45
Linux Linux 9aaea09b4cbdbe1a80ab3fa1a5d32c3ec61fa6e2 < 2b498df75d6c29aa3e760127ae0f0003df598b53
Linux Linux 4.16

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.18%
Raw Score 0.001760
Percentile 7.2%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00176
2026-10-30
0.00168
2026-10-29
0.00168

Intelligence Sources

mitre ref →
nvd ref →