CVE intelligence
CVE-2026-98835
Vulnerability intelligence
Published Oct 18, 2026 Sources checked Oct 21, 2026
N/A CVSS not listed Score unavailable
What this means
Review the available evidence
CVE-2026-98835. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
What to do next Remediation and response
CISA KEV Not listed Based on the latest collected catalog
EPSS 0.2% Estimated 30-day exploitation probability
Ransomware use Not marked CISA KEV ransomware field
Threat actors 0 Source-linked actor relationships
Overview
What is CVE-2026-98835? In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kionix-kx022a: Fix array boundary check
The driver performs a sanity check for an array size, when converting a register value to an array index. The check incorrectly accepts the sizeof(array) as a last index, when last valid index should be sizeof(array) - 1.
Fix the check by bailing out when index >= sizeof(array).
Source: NVD
Sources Check the original records SecurityAlert keeps CVSS, KEV, EPSS, vendor guidance, and actor links separate so you can see where each fact came from.