All vulnerabilities
CVE-2026-98054

Linux: ASoC: Intel: avs: Fix unbalanced module reference count

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3fcf670f023d47e4eb970fb886ee562b5bdfbee7Also 23ebd4ed5799340f1d2193195c97f61d39aa9899, 60b396b2aeca303bc468937d2b44a82399f37b3cCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 3fcf670f023d47e4eb970fb886ee562b5bdfbee7LinuxCVE List
  • 23ebd4ed5799340f1d2193195c97f61d39aa9899LinuxCVE List
  • 60b396b2aeca303bc468937d2b44a82399f37b3cLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Fix unbalanced module reference count

strace_open() invokes try_module_get() which on success takes the module reference. If any follow up operation causes strace_open() to fail, the refcount shall be put down.

Text from CVE List

Affected versions 10

  • Linuxaffected: 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a before 3fcf670f023d47e4eb970fb886ee562b5bdfbee7CVE List
  • Linuxaffected: 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a before 23ebd4ed5799340f1d2193195c97f61d39aa9899CVE List
  • Linuxaffected: 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a before 60b396b2aeca303bc468937d2b44a82399f37b3cCVE List
  • Linuxaffected: 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a before d4fa6f94b91137e329ea3f5b360e140b227bb696CVE List
  • Linuxaffected: 6.7CVE List
  • Linuxunaffected: all versions before 6.7CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4