CVE-2026-98663

Description

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.

Is your site exposed to CVE-2026-98663?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/396b83106f5e7d16467049f0caabd10533c01a0e https://git.kernel.org/stable/c/8a782244972715c76bdaf8b662e9b22e260c5296 https://git.kernel.org/stable/c/b7e507c6da8875da93b4130c8185e82a9dfd565c https://git.kernel.org/stable/c/ce308ce18dedc18e9eeff8473892975e6fdd7aef https://git.kernel.org/stable/c/e1dea54496f90a62318cf4eeaa1e9ef8316e92b6

Frequently Asked Questions

What is CVE-2026-98663? +

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it. Use debugfs_create_file() instead.

How do I check if I'm vulnerable to CVE-2026-98663? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.