CVE-2026-98835

iio: accel: kionix-kx022a: Fix array boundary check

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 21, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: kionix-kx022a: Fix array boundary check

The driver performs a sanity check for an array size, when converting a register value to an array index. The check incorrectly accepts the sizeof(array) as a last index, when last valid index should be sizeof(array) - 1.

Fix the check by bailing out when index >= sizeof(array).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 714d8f0b1c616a6a82be87ccb72271b6092773d1Affected 7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 87746be179dca4d94d73d5a323a39a87bb2e90fcAffected 7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 4c73c1859fa64509aae7e23a6dbd2d5c8a64c05dAffected 7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 22d377178de281d21ddf908d03a8e9fde3339d9fAffected 7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 0e65412aee4f651d2c9785f542a13e4b44002a75Affected
LinuxLinux	6.2Affected before 6.2Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 714d8f0b1c616a6a82be87ccb72271b6092773d1Affected
7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 87746be179dca4d94d73d5a323a39a87bb2e90fcAffected
7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 4c73c1859fa64509aae7e23a6dbd2d5c8a64c05dAffected
7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 22d377178de281d21ddf908d03a8e9fde3339d9fAffected
7c1d1677b3227c6b18ac999f2b84778baa280b8f to before 0e65412aee4f651d2c9785f542a13e4b44002a75Affected

LinuxLinux

6.2Affected
before 6.2Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.