SB20261022269 - Missing initialization of resource in Linux kernel iio adc driver
Published: October 22, 2026
Security Bulletin ID
SB20261022269
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Missing initialization of resource (CVE-ID: CVE-2026-98674)
CWE-ID: CWE-909 - Missing initialization of resource
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to potentially cause a denial of service by triggering kernel operations that use an uninitialized mutex.
The vulnerability exists due to missing initialization of the state mutex in the Linux kernel ADI AXI ADC driver when accessing ADC registers. A local user can trigger affected register access paths to potentially disrupt kernel operation and cause a denial of service.
Remediation
Install update from vendor's website.