CVE-2026-98669None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: iio: buffer: serialize buffer teardown with mode claims Buffer-mode claims hold mlock to guarantee that the device remains in buffer mode until the claim is released. …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Last analysed / modified upstream
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: serialize buffer teardown with mode claims
Buffer-mode claims hold mlock to guarantee that the device remains in buffer mode until the claim is released. Normal buffer updates take info_exist_lock followed by mlock in iio_update_buffers().
However, iio_device_unregister() disables and deactivates all buffers without taking mlock. This can invalidate buffer state, including active_scan_mask, while a buffer-mode claim is held.
Take mlock in iio_disable_all_buffers() so that unregister honors the mode-claim lifetime guarantee. The info_exist_lock -> mlock ordering matches iio_update_buffers().
Linux >= 0a8565425afd8ba0e1a0ea73e21da119ee6dacea < 6a728408ff522b749c2a3c7e68f44e861fa0dbfbLinux >= 0a8565425afd8ba0e1a0ea73e21da119ee6dacea < 89f3852a28fcf7bab599280cb082baa0675536dbLinux >= 0a8565425afd8ba0e1a0ea73e21da119ee6dacea < b466db9e68b4741af85f6c017e2bb0a2f025053fLinux >= 0a8565425afd8ba0e1a0ea73e21da119ee6dacea < e63188d77e10c0951bf67da6c295f768fd1abf4bLinux >= 0a8565425afd8ba0e1a0ea73e21da119ee6dacea < 84bb0fc46ccf6a545b8fdf57cda83770186ed8ddLinux a9c471892d75847671a246619c2148578f22bbc6Linux 7bca0af538a49dacb1470f233be0676bdc09605bLinux >= 5.15.137 < 5.16Linux >= 6.1.60 < 6.2Linux 6.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets