{"cve":"CVE-2026-98680","nvd":{"published":"2026-10-18T16:17:21.357","modified":"2026-10-19T10:19:32.447","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is never freed. Furthermore, the state information and\nprevious hardware configuration(s) aren't undone, potentially leaving\nWMI interrupts and buffers enabled, or driver state flags wrong.\n\nFree the memory and revert the hardware configuration and state flags on\nerror path.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc","https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260","https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372","https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0"],"products":[],"source":"nvd","synced_at":"2026-10-19T23:00:53.604569364+00:00"},"epss":{"cve":"CVE-2026-98680","score":0.00168,"percentile":0.0602,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}