In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod_set_value() emits a WARN when… (CVE-2026-98956)
Description
A vulnerability in the Linux kernel's ASoC adau1372 driver has been resolved. The issue involved the use of gpiod_set_value() which emits a WARN when used with GPIO providers that can sleep, such as I2C controlled GPIO expanders. The driver incorrectly used a non-sleep variant for powerdown GPIOs, which are manipulated in process context. The fix involved switching to the _cansleep variant, allowing the use of sleepy GPIOs to power off the chip without warnings.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel ASoC adau1372 driver previously used gpiod_set_value() for powerdown GPIOs, which caused warnings when the GPIO provider indicated it could sleep (common for I2C GPIO expanders). Since powerdown GPIOs are manipulated in process context, the driver now uses the _cansleep variant of gpiod_set_value(), which supports sleepy GPIOs. This change prevents WARN messages and allows proper poweroff of the chip using sleepy GPIOs.
Potential Impact
The vulnerability caused WARN messages in the kernel logs when sleepy GPIOs were manipulated incorrectly, potentially indicating improper handling of powerdown GPIOs. This could lead to instability or unexpected behavior in power management of the chip. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to use the _cansleep variant of gpiod_set_value() for sleepy GPIOs in the adau1372 driver. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the input; check the vendor advisory or Linux kernel changelogs for the exact fixed version.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8vwq-3w6f-qwf5
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98956"]
Threat ID: 6adbaad0d73cc49347b2058a
Added to database: 10/23/2026, 18:43:28 UTC
Last enriched: 10/23/2026, 18:59:27 UTC
Last updated: 10/23/2026, 22:05:17 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.