UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-98664

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400_serial_number_fops is open coded and never calls debugfs_file_get(), so debugfs_remove_recursive() does not wait for a read in progress and unbind frees the iio_dev underneath it. Commit ae1d37a9bb4b ("iio: imu: adis16400: use DEFINE_DEBUGFS_ATTRIBUTE instead of DEFINE_SIMPLE_ATTRIBUTE") converted product_id and flash_count to DEFINE_DEBUGFS_ATTRIBUTE, which protects itself, but moved all three files to debugfs_create_file_unsafe(). serial_number prints three registers as "%.4x-%.4x-%.4x" and DEFINE_DEBUGFS_ATTRIBUTE() formats a single u64, so it cannot be converted without changing what the file returns. adis16475 and adis16550 already use debugfs_create_file() for their open coded files. Use it here too.

Properties

Last source
FIRST EPSS
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.002
Cve id
CVE-2026-98664
First seen by Signal
2026-10-18T18:05:58+00:00
Retrieved at
2026-10-21T01:24:51+00:00
Published at
2026-10-18T16:17:19.697
Last modified
2026-10-19T10:19:30.807
Epss percentile
0.09242

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-98664 — Ninja Signal Threat Intelligence | Ninja Signal