All vulnerabilities
CVE-2026-98055

Linux: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in68885c606a6e41dd4d3fe72f11241a6a438246edAlso 2d96325e8ed97ec70623f788c35cca5d68c34351, 498bf26639e99a98e7a3db880a7da8251aaf4289 and 2 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 68885c606a6e41dd4d3fe72f11241a6a438246edLinuxCVE List
  • 2d96325e8ed97ec70623f788c35cca5d68c34351LinuxCVE List
  • 498bf26639e99a98e7a3db880a7da8251aaf4289LinuxCVE List
  • 04447cd14ebcc924f2d745dd33b9506735bda5b4LinuxCVE List
  • 559ea14b7ae7c7562b48759fa545b64958f35b73LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Clean up the bus when fetching ML caps fails

snd_hdac_ext_bus_get_ml_capabilities() may fail and its return code shall be checked and accounted for. Address the issue by updating the error-path for avs_pci_probe().

At the same time, if the function in question succeeds but the next part of avs_pci_probe() fails, the hlink list shall be cleaned up before leaving the scope.

Text from CVE List

Affected versions 14

  • Linuxaffected: 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 68885c606a6e41dd4d3fe72f11241a6a438246edCVE List
  • Linuxaffected: 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before a16ca1987ce8666c13482437db21232d41600e3fCVE List
  • Linuxaffected: 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 2d96325e8ed97ec70623f788c35cca5d68c34351CVE List
  • Linuxaffected: 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 498bf26639e99a98e7a3db880a7da8251aaf4289CVE List
  • Linuxaffected: 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 04447cd14ebcc924f2d745dd33b9506735bda5b4CVE List
  • Linuxaffected: 1affc44ea5dd554c103e0ce1e809f3aa5d942349 before 559ea14b7ae7c7562b48759fa545b64958f35b73CVE List
  • Linuxaffected: 5.19CVE List
  • Linuxunaffected: all versions before 5.19CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 6