CVE-2026-98679

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.

Is your site exposed to CVE-2026-98679?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/137c35cff4d4d69f73cbfc0bf7870bf379a7a364 https://git.kernel.org/stable/c/3365209e758c845a197211645731f0e393a86012 https://git.kernel.org/stable/c/aa94a37b5a3e560c277dac6f9e5d0d75549a6583 https://git.kernel.org/stable/c/ad690c0c1b9131725619e352cb7c970488cbf436 https://git.kernel.org/stable/c/dd30c10ff60d2b30386c23bb7c61cc97f2385c97

Frequently Asked Questions

What is CVE-2026-98679? +

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.

How do I check if I'm vulnerable to CVE-2026-98679? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.