VulnerabilityPublished 25 Sep 2026Updated 19 Oct 2026

CVE-2026-98055: Linux kernel · ASoC: Intel: avs: Clean up the bus when fetching ML caps fails

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in a16ca1987ce8666c13482437db21232d41600e3f : update Linux kernel when convenient.

Data as of 26 Oct 2026, 17:16 UTC

Severity

Low

Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in a16ca1987ce8666c13482437db21232d41600e3f, 68885c606a6e41dd4d3fe72f11241a6a438246ed, 04447cd14ebcc924f2d745dd33b9506735bda5b4 +3

Exploitation evidence

Disclosed: evidence found.
CVE published 25 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 1affc44ea5dd554c103e0ce1e809f3aa5d942349, < a16ca1987ce8666c13482437db21232d41600e3f	Fixed in a16ca1987ce8666c13482437db21232d41600e3f
LinuxLinux	Affected ≥ 1affc44ea5dd554c103e0ce1e809f3aa5d942349, < 68885c606a6e41dd4d3fe72f11241a6a438246ed	Fixed in 68885c606a6e41dd4d3fe72f11241a6a438246ed
LinuxLinux	Affected ≥ 1affc44ea5dd554c103e0ce1e809f3aa5d942349, < 04447cd14ebcc924f2d745dd33b9506735bda5b4	Fixed in 04447cd14ebcc924f2d745dd33b9506735bda5b4
LinuxLinux	Affected ≥ 1affc44ea5dd554c103e0ce1e809f3aa5d942349, < 559ea14b7ae7c7562b48759fa545b64958f35b73	Fixed in 559ea14b7ae7c7562b48759fa545b64958f35b73
LinuxLinux	Affected ≥ 1affc44ea5dd554c103e0ce1e809f3aa5d942349, < 498bf26639e99a98e7a3db880a7da8251aaf4289	Fixed in 498bf26639e99a98e7a3db880a7da8251aaf4289
LinuxLinux	Affected ≥ 1affc44ea5dd554c103e0ce1e809f3aa5d942349, < 2d96325e8ed97ec70623f788c35cca5d68c34351	Fixed in 2d96325e8ed97ec70623f788c35cca5d68c34351

AI-suggested

This issue has been fixed in the Linux kernel. Users should update to the fixed versions identified by the commits listed in the established facts. No additional mitigation is required beyond applying the official fix.

Description

A vulnerability in the Linux kernel's ASoC Intel AVS driver was fixed by ensuring proper cleanup of the bus when fetching machine learning capabilities fails. The function snd_hdac_ext_bus_get_ml_capabilities() may fail, and its return code was not properly checked, leading to potential resource mismanagement. The fix updates the error handling in avs_pci_probe() to clean up resources correctly on failure.

Impact

Improper cleanup of resources on failure in the AVS driver could lead to resource leaks or instability in the kernel's audio subsystem. There is no indication of direct exploitation or security compromise beyond resource mismanagement. No known exploits in the wild have been reported.

Summary

The Linux kernel's ASoC Intel AVS driver contained a flaw where the function snd_hdac_ext_bus_get_ml_capabilities() could fail without proper error handling, causing the bus not to be cleaned up correctly. Additionally, if subsequent steps in avs_pci_probe() failed after this function succeeded, the hlink list was not cleaned up properly. The issue was addressed by updating the error path in avs_pci_probe() to ensure proper resource cleanup on failure conditions.

References

Community reviews

Loading reviews…

Exploitation evidence

What to do

Affected software

Description

AI analysisMachine-generated, updated 26 Oct 2026, 12:53 UTC

Technical details

References

Community reviews

Related threats