CVE-2026-98679

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-10-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.

Affected Software (9)

VendorProductVersion
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < b33dfdc0f22dd6c9cb9ae34a32723ef0a5d2ccf5
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < 8c6d1abaff5dbbe2d2b7529de7f1f2395a2f07e9
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < 2f9f88da802733bab7a87a0e685c8cfa7488f6ac
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < 137c35cff4d4d69f73cbfc0bf7870bf379a7a364
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < ad690c0c1b9131725619e352cb7c970488cbf436
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < 3365209e758c845a197211645731f0e393a86012
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < aa94a37b5a3e560c277dac6f9e5d0d75549a6583
Linux Linux b4b491c0832ef90a7a5070e5975bc8427f2049ca < dd30c10ff60d2b30386c23bb7c61cc97f2385c97
Linux Linux 3.18

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.18%
Raw Score 0.001760
Percentile 7.2%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00176
2026-10-30
0.00168
2026-10-29
0.00168

Intelligence Sources

mitre ref →
nvd ref →