CVE-2026-98679: iio: accel: kxcjk-1013: reject duplicate event disable
In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kxcjk-1013: reject duplicate event disable
The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013setpowerstate(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning.
Return early when the requested state already matches evenablestate.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel IIO kxcjk-1013 driver, return early when the requested event enable state already matches ev_enable_state, so duplicate event-disable requests do not call kxcjk1013_set_power_state(data, false) or decrement an unacquired runtime PM reference.