Skip to main content
CVE-2026-98940VulnerabilityPublished Updated

Microsoft · ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-98940· Medium

Not known to be exploited · fixed in f11336e6d3cd9e28e5cdf1cb8a6171e7c3eff4e4 : update Microsoft when convenient.

Data as of 28 Oct 2026, 08:45 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in f11336e6d3cd9e28e5cdf1cb8a6171e7c3eff4e4, ca51771c8efde5df05476ac98dd1b2af4e2b149f, 6833f1893ac2ec40016c348779af63debf3700d2 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ c223f41c1a52bfe10f1d3311679b1d1f9813e500, < f11336e6d3cd9e28e5cdf1cb8a6171e7c3eff4e4
Fixed in
  • f11336e6d3cd9e28e5cdf1cb8a6171e7c3eff4e4
LinuxLinuxAffected
  • ≥ c223f41c1a52bfe10f1d3311679b1d1f9813e500, < ca51771c8efde5df05476ac98dd1b2af4e2b149f
Fixed in
  • ca51771c8efde5df05476ac98dd1b2af4e2b149f
LinuxLinuxAffected
  • ≥ c223f41c1a52bfe10f1d3311679b1d1f9813e500, < 6833f1893ac2ec40016c348779af63debf3700d2
Fixed in
  • 6833f1893ac2ec40016c348779af63debf3700d2
LinuxLinuxAffected
  • ≥ c223f41c1a52bfe10f1d3311679b1d1f9813e500, < 775df6a27e8433e2414124472938009b958f9a77
Fixed in
  • 775df6a27e8433e2414124472938009b958f9a77
LinuxLinuxAffected
  • ≥ c223f41c1a52bfe10f1d3311679b1d1f9813e500, < 69d2b7a4c115181629eb14d800aecc3e7de3f7fb
Fixed in
  • 69d2b7a4c115181629eb14d800aecc3e7de3f7fb
LinuxLinuxAffected
  • =5.14
Fixed in–

Description

CVE-2026-98940 is a published vulnerability related to Microsoft software versions 3.0 and 4.0. The provided description does not detail the nature of the vulnerability or its impact. No CVSS score or exploit information is available.

References

Community reviews

Loading reviews…