Skip to main content
VulnerabilityPublished

CVE-2026-98817: Linux kernel · ASoC: SDCA: Add better pm_runtime error handling in func probe

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited : upgrade to 91094f9c86216898ce92141c26c8fec7e97544c0 or 1f90c62a2412b3b9af27e0d23e346efcf88d83bd when convenient.

Data as of 26 Oct 2026, 16:39 UTC

Severity
Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 91094f9c86216898ce92141c26c8fec7e97544c0, 1f90c62a2412b3b9af27e0d23e346efcf88d83bd

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to 91094f9c86216898ce92141c26c8fec7e97544c0 or 1f90c62a2412b3b9af27e0d23e346efcf88d83bd.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 3af1815a2f9caebfc666af3912e24d030a5368d5, < 91094f9c86216898ce92141c26c8fec7e97544c0
Fixed in
  • 91094f9c86216898ce92141c26c8fec7e97544c0
LinuxLinuxAffected
  • ≥ 3af1815a2f9caebfc666af3912e24d030a5368d5, < 1f90c62a2412b3b9af27e0d23e346efcf88d83bd
Fixed in
  • 1f90c62a2412b3b9af27e0d23e346efcf88d83bd
LinuxLinuxAffected
  • =6.19
Fixed in–

AI-suggested

A fix is available and has been applied in the Linux kernel commits identified by hashes 91094f9c86216898ce92141c26c8fec7e97544c0 and 1f90c62a2412b3b9af27e0d23e346efcf88d83bd. Users should update to a kernel version including these commits to remediate the issue.

Description

A vulnerability in the Linux kernel's ASoC SDCA component related to power management runtime error handling in the function probe has been resolved. The fix adds a common error path to properly balance the runtime PM reference during probe initialization.

References

Community reviews

Loading reviews…