CVE intelligence
CVE-2026-98666
Vulnerability intelligence
Published Oct 18, 2026 Sources checked Oct 21, 2026
N/A CVSS not listed Score unavailable
What this means
Review the available evidence
CVE-2026-98666. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
What to do next Remediation and response
CISA KEV Not listed Based on the latest collected catalog
EPSS 0.2% Estimated 30-day exploitation probability
Ransomware use Not marked CISA KEV ransomware field
Threat actors 0 Source-linked actor relationships
Overview
What is CVE-2026-98666? In the Linux kernel, the following vulnerability has been resolved:
iio: gyro: adis16136: fix unprotected debugfs reads
The serial_number file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsafe() requires. debugfs_remove_recursive() therefore does not wait for a read in progress, and unbind frees the iio_dev underneath it.
Use debugfs_create_file() instead.
Source: NVD
Sources Check the original records SecurityAlert keeps CVSS, KEV, EPSS, vendor guidance, and actor links separate so you can see where each fact came from.