CVE-2026-98835 PUBLISHED

iio: accel: kionix-kx022a: Fix array boundary check

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: kionix-kx022a: Fix array boundary check

The driver performs a sanity check for an array size, when converting a register value to an array index. The check incorrectly accepts the sizeof(array) as a last index, when last valid index should be sizeof(array) - 1.

Fix the check by bailing out when index >= sizeof(array).

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 7c1d1677b3227c6b18ac999f2b84778baa280b8f to 87746be179dca4d94d73d5a323a39a87bb2e90fc (excl.)
  • affected from 7c1d1677b3227c6b18ac999f2b84778baa280b8f to 4c73c1859fa64509aae7e23a6dbd2d5c8a64c05d (excl.)
  • affected from 7c1d1677b3227c6b18ac999f2b84778baa280b8f to 22d377178de281d21ddf908d03a8e9fde3339d9f (excl.)
  • affected from 7c1d1677b3227c6b18ac999f2b84778baa280b8f to 0e65412aee4f651d2c9785f542a13e4b44002a75 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.2 is affected
  • unaffected from 0 to 6.2 (excl.)
  • unaffected from 6.12.113 to 6.12.* (incl.)
  • unaffected from 6.18.56 to 6.18.* (incl.)
  • unaffected from 7.2.10 to 7.2.* (incl.)
  • unaffected from 7.3-rc6 to * (incl.)

References