CVE-2026-98656

Description

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_work before freeing trigger iio_trigger_notify_done_atomic() defers ->reenable() into trig->reenable_work on the system workqueue, and the worker dereferences the owning trigger through container_of(). Nothing cancels this work before iio_trig_release() frees the trigger, so a worker armed by the last in-flight IRQ can outlive the free and touch freed memory. Cancel it at the top of iio_trig_release(), which every free path reaches through the device core's final put_device(). Found by an in-house static analysis tool.

Is your site exposed to CVE-2026-98656?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0017

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/2a57b9246cecd5dd797a42eb310d6c8816f26d9e https://git.kernel.org/stable/c/882d0011c59ff8ac15188ec9ce071399ecfa10ad https://git.kernel.org/stable/c/ac5d26a46c90ff61fd574eff4e8f0d71c905828a https://git.kernel.org/stable/c/cf513df1a2c75566cdc802d9da47f62e8d6cfd18 https://git.kernel.org/stable/c/e64703280ce7a23a43c27efebeb7da457c88bf5c

Frequently Asked Questions

What is CVE-2026-98656? +

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_work before freeing trigger iio_trigger_notify_done_atomic() defers ->reenable() into trig->reenable_work on the system workqueue, and the worker dereferences the owning trigger through container_of(). Nothing cancels this work before iio_trig_release() frees the trigger, so a worker armed by the last in-flight IRQ can outlive the free and touch freed memory. Cancel it at the top of iio_trig_release(), which every free path reaches through the device core's final put_device(). Found by an in-house static analysis tool.

How do I check if I'm vulnerable to CVE-2026-98656? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.