{"id":"CVE-2026-98663","summary":"iio: imu: adis16480: fix unprotected debugfs reads","details":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: adis16480: fix unprotected debugfs reads\n\nThe firmware_revision and firmware_date file operations are open coded\nand never call debugfs_file_get(), which debugfs_create_file_unsafe()\nrequires. debugfs_remove_recursive() therefore does not wait for a read\nin progress, and unbind frees the iio_dev underneath it.\n\nUse debugfs_create_file() instead.","modified":"2026-11-04T14:27:29.970212372Z","published":"2026-10-18T15:44:31.100Z","related":["SUSE-SU-2026:5091-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98663.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/396b83106f5e7d16467049f0caabd10533c01a0e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8a782244972715c76bdaf8b662e9b22e260c5296"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8a7ff80c5cce57c65c105efd3a3e112edcce0e08"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b7e507c6da8875da93b4130c8185e82a9dfd565c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cd2923032a9b8774e5a110c62c35919266387a2e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ce308ce18dedc18e9eeff8473892975e6fdd7aef"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e1dea54496f90a62318cf4eeaa1e9ef8316e92b6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ef4a716c51e19c2f2565d9993c110e5ecc3b3783"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98663.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98663"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"9bf94f836e32ea168ec7448a523c11480317ad79"},{"fixed":"8a7ff80c5cce57c65c105efd3a3e112edcce0e08"},{"fixed":"cd2923032a9b8774e5a110c62c35919266387a2e"},{"fixed":"ef4a716c51e19c2f2565d9993c110e5ecc3b3783"},{"fixed":"8a782244972715c76bdaf8b662e9b22e260c5296"},{"fixed":"b7e507c6da8875da93b4130c8185e82a9dfd565c"},{"fixed":"ce308ce18dedc18e9eeff8473892975e6fdd7aef"},{"fixed":"396b83106f5e7d16467049f0caabd10533c01a0e"},{"fixed":"e1dea54496f90a62318cf4eeaa1e9ef8316e92b6"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98663.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.16.0"},{"fixed":"5.10.273"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.224"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.113"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.56"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98663.json"}}],"schema_version":"1.9.2"}