CVE-2026-98055

ASoC: Intel: avs: Clean up the bus when fetching ML caps fails

N/A
Published: September 25, 2026 at 10:24 AM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails snd_hdac_ext_bus_get_ml_capabilities() may fail and its return code shall be checked and accounted for. Address the issue by updating the error-path for avs_pci_probe(). At the same time, if the function in question succeeds but the next part of avs_pci_probe() fails, the hlink list shall be cleaned up before leaving the scope.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

1affc44ea5dd554c103e0ce1e809f3aa5d9423495.19
Vendor states this is fixed in 04447cd14ebcc924f2d745dd33b9506735bda5b4 (fixed)
Vendor states this is fixed in 2d96325e8ed97ec70623f788c35cca5d68c34351 (fixed)
Vendor states this is fixed in 498bf26639e99a98e7a3db880a7da8251aaf4289 (fixed)
Vendor states this is fixed in 559ea14b7ae7c7562b48759fa545b64958f35b73 (fixed)
Vendor states this is fixed in 68885c606a6e41dd4d3fe72f11241a6a438246ed (fixed)
Vendor states this is fixed in a16ca1987ce8666c13482437db21232d41600e3f (fixed)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusUNDERGOING ANALYSIS

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card