Improper update of reference count in Linux kernel - CVE-2026-98679
Published: October 22, 2026
Vulnerability details
The vulnerability allows a local privileged user to underflow the runtime power-management usage count and trigger a kernel warning.
The vulnerability exists due to improper runtime power-management reference counting in kxcjk1013_write_event_config() in the Linux kernel's kxcjk-1013 accelerometer driver when processing repeated writes that disable events. A local privileged user can submit duplicate disable requests through the event enable attribute to drop a runtime power-management reference that was not acquired for the request, causing a usage-count underflow and a "Runtime PM usage count underflow" warning.
Affected software
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo
How to mitigate CVE-2026-98679
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
External References
- https://git.kernel.org/stable/c/137c35cff4d4d69f73cbfc0bf7870bf379a7a364
- https://git.kernel.org/stable/c/3365209e758c845a197211645731f0e393a86012
- https://git.kernel.org/stable/c/aa94a37b5a3e560c277dac6f9e5d0d75549a6583
- https://git.kernel.org/stable/c/ad690c0c1b9131725619e352cb7c970488cbf436
- https://git.kernel.org/stable/c/dd30c10ff60d2b30386c23bb7c61cc97f2385c97