CVE-2026-89944

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89944", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.777Z", "datePublished": "2026-09-16T10:32:31.253Z", "dateUpdated": "2026-10-30T12:33:32.358Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:33:32.358Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: hdac_hda: Fix hlink refcount leak on component registration failure\n\nhdac_hda_dev_probe() gets the HDA link with snd_hdac_ext_bus_link_get()\nbefore registering the ASoC component. If component registration fails,\nthe function returns without dropping the link reference.\n\nAlways call snd_hdac_ext_bus_link_put() after the registration attempt so\nthe reference taken during probe is balanced on both success and failure."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/hdac_hda.c"], "versions": [{"version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "lessThan": "1c2625fbdeb17376f76c57b7669e6aa6500a7149", "status": "affected", "versionType": "git"}, {"version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "lessThan": "60b5824ae259ad15f7878e4e763ec31ba4db55f2", "status": "affected", "versionType": "git"}, {"version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "lessThan": "7eef9ae3b4ef782557526dd8ba0c206f028d8c2f", "status": "affected", "versionType": "git"}, {"version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "lessThan": "e8ea01a0457080b0cc7c69c430c0ab65d84dc377", "status": "affected", "versionType": "git"}, {"version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "lessThan": "cb6b0b1a9d5a61ef841739d42c6211094e9c8e2c", "status": "affected", "versionType": "git"}, {"version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "lessThan": "6ad4892c4f5cb437a928a02f5b7d37d496aa9268", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/hdac_hda.c"], "versions": [{"version": "4.20", "status": "affected"}, {"version": "0", "lessThan": "4.20", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.110", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.51", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.5", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.12.110"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.18.51"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "7.2.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/1c2625fbdeb17376f76c57b7669e6aa6500a7149"}, {"url": "https://git.kernel.org/stable/c/60b5824ae259ad15f7878e4e763ec31ba4db55f2"}, {"url": "https://git.kernel.org/stable/c/7eef9ae3b4ef782557526dd8ba0c206f028d8c2f"}, {"url": "https://git.kernel.org/stable/c/e8ea01a0457080b0cc7c69c430c0ab65d84dc377"}, {"url": "https://git.kernel.org/stable/c/cb6b0b1a9d5a61ef841739d42c6211094e9c8e2c"}, {"url": "https://git.kernel.org/stable/c/6ad4892c4f5cb437a928a02f5b7d37d496aa9268"}], "title": "ASoC: hdac_hda: Fix hlink refcount leak on component registration failure", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/codecs/hdac_hda.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "1c2625fbdeb17376f76c57b7669e6aa6500a7149", "status": "affected", "version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "versionType": "git"}, {"lessThan": "60b5824ae259ad15f7878e4e763ec31ba4db55f2", "status": "affected", "version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "versionType": "git"}, {"lessThan": "7eef9ae3b4ef782557526dd8ba0c206f028d8c2f", "status": "affected", "version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "versionType": "git"}, {"lessThan": "e8ea01a0457080b0cc7c69c430c0ab65d84dc377", "status": "affected", "version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "versionType": "git"}, {"lessThan": "cb6b0b1a9d5a61ef841739d42c6211094e9c8e2c", "status": "affected", "version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "versionType": "git"}, {"lessThan": "6ad4892c4f5cb437a928a02f5b7d37d496aa9268", "status": "affected", "version": "6bae5ea9498926440ffc883f3dbceb0adc65e492", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/codecs/hdac_hda.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.20"}, {"lessThan": "4.20", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.110", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.51", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: hdac_hda: Fix hlink refcount leak on component registration failure\n\nhdac_hda_dev_probe() gets the HDA link with snd_hdac_ext_bus_link_get()\nbefore registering the ASoC component. If component registration fails,\nthe function returns without dropping the link reference.\n\nAlways call snd_hdac_ext_bus_link_put() after the registration attempt so\nthe reference taken during probe is balanced on both success and failure."}], "id": "CVE-2026-89944", "lastModified": "2026-10-30T13:20:36.543", "metrics": {}, "published": "2026-09-16T11:17:04.217", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1c2625fbdeb17376f76c57b7669e6aa6500a7149"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/60b5824ae259ad15f7878e4e763ec31ba4db55f2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6ad4892c4f5cb437a928a02f5b7d37d496aa9268"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7eef9ae3b4ef782557526dd8ba0c206f028d8c2f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cb6b0b1a9d5a61ef841739d42c6211094e9c8e2c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e8ea01a0457080b0cc7c69c430c0ab65d84dc377"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ASoC: hdac_hda: Fix hlink refcount leak on component registration failure", "id": "2535334", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535334"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-911", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nASoC: hdac_hda: Fix hlink refcount leak on component registration failure\nhdac_hda_dev_probe() gets the HDA link with snd_hdac_ext_bus_link_get()\nbefore registering the ASoC component. If component registration fails,\nthe function returns without dropping the link reference.\nAlways call snd_hdac_ext_bus_link_put() after the registration attempt so\nthe reference taken during probe is balanced on both success and failure.", "A flaw was found in the Linux kernel's Audio System on Chip (ASoC) High Definition Audio Codec (hdac_hda) component. During the device probing process, a reference to an HDA link is acquired but not properly released if the ASoC component registration fails. This oversight leads to a reference count leak, which could result in resource exhaustion and potentially impact system stability or lead to a Denial of Service (DoS)."], "name": "CVE-2026-89944", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-16T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89944\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89944\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89944.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6bae5ea9498926440ffc883f3dbceb0adc65e492,7eef9ae3b4ef782557526dd8ba0c206f028d8c2f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6bae5ea9498926440ffc883f3dbceb0adc65e492,e8ea01a0457080b0cc7c69c430c0ab65d84dc377)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6bae5ea9498926440ffc883f3dbceb0adc65e492,cb6b0b1a9d5a61ef841739d42c6211094e9c8e2c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6bae5ea9498926440ffc883f3dbceb0adc65e492,6ad4892c4f5cb437a928a02f5b7d37d496aa9268)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.20"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.20)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.110,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.51,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.5,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-17T11:15:07.408013+00:00", "updated": "2026-09-24T04:00:13.037930+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}