CVE-2026-98666

A flaw was found in the Linux kernel's Industrial I/O (IIO) adis16136 gyroscope driver. The driver fails to properly synchronize debugfs read operations during device unbinding, allowing an active read to continue after the underlying device data structures have been freed. A local user with access to the debugfs interface could exploit this flaw to trigger a use-after-free condition, leading to kernel memory corruption or a Denial of Service (DoS) via a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.