CVE-2026-98680

What it actually does

In the Linux kernel IIO accelerometer driver for Kionix KX022A, failure of regmap operations in the FIFO buffer enable path causes allocated sample memory to remain unfreed while hardware configuration and driver state flags are not reverted, leaving WMI interrupts or buffers enabled in an inconsistent state.

Why it matters to the business

Embedded and IoT systems using the affected sensor may suffer gradual memory exhaustion or unreliable device behavior, increasing operational instability and maintenance overhead in environments with limited resources.

How an attack unfolds

A local attacker interacts with the IIO subsystem to trigger buffer enablement, induces a regmap failure inside kx022a_fifo_enable, and leverages the resulting memory leak together with unreverted interrupt or buffer state to create resource pressure or kernel inconsistencies that can be further abused.

How to fix it

Apply the upstream kernel patch that adds memory release and state-reversion logic on the error path of kx022a_fifo_enable; rebuild and deploy the corrected kernel image on all affected devices.

How to confirm the fix worked

Inspect the kx022a driver source for explicit kfree and hardware-restore calls on every error exit from the buffer-enable function; run synthetic tests that inject regmap failures and confirm both memory and state are cleaned up.

Typical attack path

1. Obtain local access on a Linux system exposing the kionix-kx022a driver
2. Use IIO interfaces to enable sensor buffering
3. Force a regmap error during the enable sequence
4. Exploit retained memory allocations and incorrect hardware state for denial-of-service or additional kernel attacks

How to detect it

Search kernel logs and dmesg for kx022a buffer-enable errors; correlate spikes in memory usage or unexpected interrupt activity from the accelerometer device with application attempts to enable IIO buffers.

What your security team should do

• Expedite deployment of patched kernels on any system exposing the kionix-kx022a accelerometer
• Add monitoring for unexpected memory growth correlated with sensor buffer operations
• Review similar IIO drivers for comparable missing error-path cleanup