{
  "cveId": "CVE-2026-98680",
  "url": "https://patchblox.com/security/cve/CVE-2026-98680",
  "summary": "CVE-2026-98680 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-98680, released October 19, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "iio: accel: kionix-kx022a: Prevent memory leak and fix state",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  iio: accel: kionix-kx022a: Prevent memory leak and fix state  The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022a_fifo_enable() at the buffer enable path, the allocated memory is never freed. Furthermore, the state information and previous hardware configuration(s) aren\u0027t undone, potentially leaving WMI interrupts and buffers enabled, or driver state flags wrong.  Free the memory and revert the hardware configuration and state flags on error path.",
  "published": "2026-10-18T16:17:21Z",
  "severity": "",
  "epss": 0.00168,
  "epssPercentile": 0.06094,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98680",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.113-1",
      "fix": "DEBIAN-CVE-2026-98680",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98680",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.10-1",
      "fix": "DEBIAN-CVE-2026-98680",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98680",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.113-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-98680",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98680",
      "released": "2026-10-19T16:27:52Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}