CVE-2026-98055ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails snd_hdac_ext_bus_get_ml_capabilities() may fail and its return code shall be checked and accounted for. Address the issue by updating the error-path for avs_pci_probe(). At the same time, if the function in question succeeds but the next part of avs_pci_probe() fails, the hlink list shall be cleaned up before leaving the scope.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Undergoing Analysis
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 68885c606a6e41dd4d3fe72f11241a6a438246ed; from 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before a16ca1987ce8666c13482437db21232d41600e3f; from 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 2d96325e8ed97ec70623f788c35cca5d68c34351; from 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 498bf26639e99a98e7a3db880a7da8251aaf4289; from 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 04447cd14ebcc924f2d745dd33b9506735bda5b4; from 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 559ea14b7ae7c7562b48759fa545b64958f35b73 | CNA record |
References
- https://git.kernel.org/stable/c/68885c606a6e41dd4d3fe72f11241a6a438246ed
- https://git.kernel.org/stable/c/a16ca1987ce8666c13482437db21232d41600e3f
- https://git.kernel.org/stable/c/2d96325e8ed97ec70623f788c35cca5d68c34351
- https://git.kernel.org/stable/c/498bf26639e99a98e7a3db880a7da8251aaf4289
- https://git.kernel.org/stable/c/04447cd14ebcc924f2d745dd33b9506735bda5b4
- https://git.kernel.org/stable/c/559ea14b7ae7c7562b48759fa545b64958f35b73
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.