CVE-2026-98664

In the Linux kernel, the following vulnerability has been resolved:

iio: imu: adis16400: fix unprotected debugfs reads

adis16400 serial number fops is open coded and never calls debugfs file get(), so debugfs remove recursive() does not wait for a read in progress and unbind frees the iio dev underneath it.

Commit ae1d37a9bb4b ("iio: imu: adis16400: use DEFINE DEBUGFS ATTRIBUTE instead of DEFINE SIMPLE ATTRIBUTE") converted product id and flash count to DEFINE DEBUGFS ATTRIBUTE, which protects itself, but moved all three files to debugfs create file unsafe().

serial number prints three registers as "%.4x-%.4x-%.4x" and DEFINE DEBUGFS ATTRIBUTE() formats a single u64, so it cannot be converted without changing what the file returns. adis16475 and adis16550 already use debugfs create file() for their open coded files. Use it here too.