VulnerabilityPublished 23 Oct 2026

CVE-2026-98956: Linux kernel · ASoC: adau1372: allow sleepy powerdown GPIOs

Source GCVE Database

Authoritative record:CVE-2026-98956

Not known to be exploited · fixed in 58905982b0d912021325f5de84facae86cc0f2f2 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 13:47 UTC

Severity

Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in 58905982b0d912021325f5de84facae86cc0f2f2, 65cd0e21746b812d311e9fac6d473dd62f0ad52a, 64dd172bbffe6135d79a06ddad53dd2da4d8bd62 +2

Exploitation evidence

Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

ghsa-8vwq-3w6f-qwf5

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 6cd4c6459e47402ab90802eca61a18b231434053, < 58905982b0d912021325f5de84facae86cc0f2f2	Fixed in 58905982b0d912021325f5de84facae86cc0f2f2
LinuxLinux	Affected ≥ 6cd4c6459e47402ab90802eca61a18b231434053, < 65cd0e21746b812d311e9fac6d473dd62f0ad52a	Fixed in 65cd0e21746b812d311e9fac6d473dd62f0ad52a
LinuxLinux	Affected ≥ 6cd4c6459e47402ab90802eca61a18b231434053, < 64dd172bbffe6135d79a06ddad53dd2da4d8bd62	Fixed in 64dd172bbffe6135d79a06ddad53dd2da4d8bd62
LinuxLinux	Affected ≥ 6cd4c6459e47402ab90802eca61a18b231434053, < 47c0c7a051b70d396774d5dc27b23283c28c3555	Fixed in 47c0c7a051b70d396774d5dc27b23283c28c3555
LinuxLinux	Affected ≥ 6cd4c6459e47402ab90802eca61a18b231434053, < 6cf4c3c9b7a4df0fe4cc67481b7b251cff781b29	Fixed in 6cf4c3c9b7a4df0fe4cc67481b7b251cff781b29
LinuxLinux	Affected =5.11	Fixed in–

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod_set_value() emits a WARN when the GPIO provider indicates that it can sleep, as is typical for I2C controlled GPIO expanders. Since the powerdown GPIO is only manipulated in process context, use the _cansleep variant instead. This lets the driver use sleepy GPIOs to power off the chip.

References

Community reviews

Loading reviews…