GHSA-JG4R-9RQJ-MGW5
Vulnerability from github – Published: 2026-10-18 18:31 – Updated: 2026-10-30 15:33In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kxcjk-1013: reject duplicate event disable
The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning.
Return early when the requested state already matches ev_enable_state.
{
"affected": [],
"aliases": [
"CVE-2026-98679"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-18T16:17:21Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kxcjk-1013: reject duplicate event disable\n\nThe IIO core does not filter duplicate writes to the event enable\nattribute. kxcjk1013_write_event_config() already ignores repeated\nenable requests, but a repeated disable request still calls\nkxcjk1013_set_power_state(data, false), dropping a runtime PM reference\nthat was not acquired for this request. This can underflow the runtime\nPM usage count and trigger a \"Runtime PM usage count underflow\" warning.\n\nReturn early when the requested state already matches ev_enable_state.",
"id": "GHSA-jg4r-9rqj-mgw5",
"modified": "2026-10-30T15:33:55Z",
"published": "2026-10-18T18:31:59Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98679"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/137c35cff4d4d69f73cbfc0bf7870bf379a7a364"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/2f9f88da802733bab7a87a0e685c8cfa7488f6ac"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/3365209e758c845a197211645731f0e393a86012"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/8c6d1abaff5dbbe2d2b7529de7f1f2395a2f07e9"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/aa94a37b5a3e560c277dac6f9e5d0d75549a6583"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/ad690c0c1b9131725619e352cb7c970488cbf436"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/b33dfdc0f22dd6c9cb9ae34a32723ef0a5d2ccf5"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/dd30c10ff60d2b30386c23bb7c61cc97f2385c97"
}
],
"schema_version": "1.4.0",
"severity": []
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.