The Linux kernel’s IIO subsystem permits duplicate disable requests to the kxcjk‑1013 accelerometer driver. While the driver ignores repeated enable commands, a repeated disable triggers the power‑state routine, releasing a reference that was never acquired. This causes the runtime PM usage counter to underflow, leading to a kernel warning and potential instability in device power management. The flaw does not directly grant code execution or elevated privileges but can degrade system reliability by producing warning messages or, in worst cases, a crash if the underflow propagates through higher‑level logic.

All versions of the Linux kernel that ship the kxcjk‑1013 driver are affected. The vendor product list indicates a generic Linux kernel implementation with no specific version constraints. The driver is part of the IIO core and is present in many mainstream distributions. The vulnerability resides in the device driver code and the platform’s runtime PM subsystem.

The EPSS score is < 1% and the vulnerability is not listed in CISA’s KEV catalog, implying no confirmed exploitation at the time of this analysis. The CVSS score of 3.3 indicates low severity. The flaw requires the ability to write to the event enable attribute of the kxcjk‑1013 device, which typically requires kernel or privileged user access (inferred). Because the bug only triggers a runtime counter underflow and not a privilege escalation or direct code execution path, the risk is considered moderate, focused on stability rather than an attacker’s ability to compromise system integrity.