Description
In the Linux kernel, the following vulnerability has been resolved:

iio: accel: kionix-kx022a: Prevent memory leak and fix state

The driver allocates memory for samples at buffer enable path. If regmap
operation fails in the kx022a_fifo_enable() at the buffer enable path, the
allocated memory is never freed. Furthermore, the state information and
previous hardware configuration(s) aren't undone, potentially leaving
WMI interrupts and buffers enabled, or driver state flags wrong.

Free the memory and revert the hardware configuration and state flags on
error path.
Published: 2026-10-18
Score: n/a
EPSS: n/a
KEV: No
Impact: Memory Leak and Incorrect Driver State
Action: Patch
AI Analysis

Impact

The kionix-kx022a driver in the Linux kernel allocates memory for sensor samples when a buffer is enabled. If a regmap operation fails during this enable path, the newly allocated memory is never released, causing a memory leak. In addition, the driver does not reset hardware configuration or internal state flags on this error path, leaving interrupts and buffers enabled or leaving driver flags in an inconsistent state. These faults can lead to resource exhaustion, instability, and unpredictable device behavior, potentially impacting system integrity and availability.

Affected Systems

The vulnerability affects the Linux kernel's iio subsystem driver for the Kionix KX022A accelerometer. Any Linux distribution that includes this driver in its kernel receives the impact; no specific kernel version range is listed, so the issue applies broadly to kernels containing the unpatched driver.

Risk and Exploitability

The CVSS score and EPSS metric are not provided, so the precise severity cannot be quantified here. The flaw is local from the perspective of a user who can invoke the buffer enable path on the device, so the attack vector is likely local. An attacker with sufficient privileges could repeatedly trigger the error path to exhaust memory or destabilize the system, leading to a denial‑of‑service condition. The vulnerability is not listed in the CISA KEV catalog as of the latest data.

Generated by OpenCVE AI on October 18, 2026 at 18:47 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Linux kernel patch that addresses the memory leak and resets hardware state in the kionix-kx022a driver (see the Git links provided for the commit that implements the fix).
  • Reboot or reload the kernel module after applying the patch to ensure the changes take effect.
  • If a patch cannot yet be applied, disable the IIO buffer for the Kionix KX022A device or reset the hardware manually to clear any residual enabled interrupts or buffers.

Generated by OpenCVE AI on October 18, 2026 at 18:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 18 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-789

Sun, 18 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022a_fifo_enable() at the buffer enable path, the allocated memory is never freed. Furthermore, the state information and previous hardware configuration(s) aren't undone, potentially leaving WMI interrupts and buffers enabled, or driver state flags wrong. Free the memory and revert the hardware configuration and state flags on error path.
Title iio: accel: kionix-kx022a: Prevent memory leak and fix state
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-18T15:45:39.927Z

Reserved: 2026-09-25T10:25:14.364Z

Link: CVE-2026-98680

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:21.357

Modified: 2026-10-18T16:17:21.357

Link: CVE-2026-98680

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T19:00:11Z

Weaknesses
  • CWE-789

    Memory Allocation with Excessive Size Value