{"id":"CVE-2026-98663","summary":"iio: imu: adis16480: fix unprotected debugfs reads","details":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: adis16480: fix unprotected debugfs reads\n\nThe firmware_revision and firmware_date file operations are open coded\nand never call debugfs_file_get(), which debugfs_create_file_unsafe()\nrequires. debugfs_remove_recursive() therefore does not wait for a read\nin progress, and unbind frees the iio_dev underneath it.\n\nUse debugfs_create_file() instead.","modified":"2026-10-20T02:30:46.448648860Z","published":"2026-10-18T15:44:31.100Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98663.json","cna_assigner":"Linux"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/396b83106f5e7d16467049f0caabd10533c01a0e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b7e507c6da8875da93b4130c8185e82a9dfd565c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ce308ce18dedc18e9eeff8473892975e6fdd7aef"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e1dea54496f90a62318cf4eeaa1e9ef8316e92b6"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98663.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98663"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"9bf94f836e32ea168ec7448a523c11480317ad79"},{"fixed":"b7e507c6da8875da93b4130c8185e82a9dfd565c"},{"fixed":"ce308ce18dedc18e9eeff8473892975e6fdd7aef"},{"fixed":"396b83106f5e7d16467049f0caabd10533c01a0e"},{"fixed":"e1dea54496f90a62318cf4eeaa1e9ef8316e92b6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98663.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.16.0"},{"fixed":"6.12.113"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.56"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98663.json"}}],"schema_version":"1.9.0"}