CVE-2026-98668 iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
A local attacker can read uninitialized kernel heap memory via the IIO buffer subsystem when handling unaligned data with timestamps enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98668?
CVE-2026-98668 is a vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
iio_push_to_buffers_with_ts_unaligned() leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled. Specify __GFP_ZERO for the devm_krealloc() to ensure any extra space is cleared.
Which versions are affected by CVE-2026-98668?
How do I fix CVE-2026-98668?
Apply the vendor's patch.
Is CVE-2026-98668 being exploited?
There is no known exploitation of CVE-2026-98668 in the wild and no public exploit code.
Sources
Also known as AZL-109152, BELL-CVE-2026-98668, DEBIAN-CVE-2026-98668, GHSA-f4c5-jpx2-jvrg, UBUNTU-CVE-2026-98668.