CVE-2026-98677

A flaw was found in the Linux kernel's Analog-to-Digital Converter (ADC) Sigma-Delta driver. Due to an improper resource cleanup sequence when a device is unbound or disconnected, the internal sample buffer is freed before interrupt handling is disabled. A local attacker with administrative privileges could exploit this by unbinding the device during active data transfers, causing incoming data to be copied into freed memory. This use-after-free condition leads to memory corruption, potentially resulting in a Denial of Service (DoS) via a system crash or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.