CVE-2026-98055

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98055", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:19:56.072Z", "datePublished": "2026-09-25T10:24:02.308Z", "dateUpdated": "2026-10-19T09:13:01.189Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:13:01.189Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: avs: Clean up the bus when fetching ML caps fails\n\nsnd_hdac_ext_bus_get_ml_capabilities() may fail and its return code\nshall be checked and accounted for. Address the issue by updating the\nerror-path for avs_pci_probe().\n\nAt the same time, if the function in question succeeds but the next part\nof avs_pci_probe() fails, the hlink list shall be cleaned up before\nleaving the scope."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/intel/avs/core.c"], "versions": [{"version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "lessThan": "68885c606a6e41dd4d3fe72f11241a6a438246ed", "status": "affected", "versionType": "git"}, {"version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "lessThan": "a16ca1987ce8666c13482437db21232d41600e3f", "status": "affected", "versionType": "git"}, {"version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "lessThan": "2d96325e8ed97ec70623f788c35cca5d68c34351", "status": "affected", "versionType": "git"}, {"version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "lessThan": "498bf26639e99a98e7a3db880a7da8251aaf4289", "status": "affected", "versionType": "git"}, {"version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "lessThan": "04447cd14ebcc924f2d745dd33b9506735bda5b4", "status": "affected", "versionType": "git"}, {"version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "lessThan": "559ea14b7ae7c7562b48759fa545b64958f35b73", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/intel/avs/core.c"], "versions": [{"version": "5.19", "status": "affected"}, {"version": "0", "lessThan": "5.19", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/68885c606a6e41dd4d3fe72f11241a6a438246ed"}, {"url": "https://git.kernel.org/stable/c/a16ca1987ce8666c13482437db21232d41600e3f"}, {"url": "https://git.kernel.org/stable/c/2d96325e8ed97ec70623f788c35cca5d68c34351"}, {"url": "https://git.kernel.org/stable/c/498bf26639e99a98e7a3db880a7da8251aaf4289"}, {"url": "https://git.kernel.org/stable/c/04447cd14ebcc924f2d745dd33b9506735bda5b4"}, {"url": "https://git.kernel.org/stable/c/559ea14b7ae7c7562b48759fa545b64958f35b73"}], "title": "ASoC: Intel: avs: Clean up the bus when fetching ML caps fails", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/intel/avs/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "68885c606a6e41dd4d3fe72f11241a6a438246ed", "status": "affected", "version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "versionType": "git"}, {"lessThan": "a16ca1987ce8666c13482437db21232d41600e3f", "status": "affected", "version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "versionType": "git"}, {"lessThan": "2d96325e8ed97ec70623f788c35cca5d68c34351", "status": "affected", "version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "versionType": "git"}, {"lessThan": "498bf26639e99a98e7a3db880a7da8251aaf4289", "status": "affected", "version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "versionType": "git"}, {"lessThan": "04447cd14ebcc924f2d745dd33b9506735bda5b4", "status": "affected", "version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "versionType": "git"}, {"lessThan": "559ea14b7ae7c7562b48759fa545b64958f35b73", "status": "affected", "version": "1affc44ea5dd554c103e0ce1e809f3aa5d942349", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/intel/avs/core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.19"}, {"lessThan": "5.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: avs: Clean up the bus when fetching ML caps fails\n\nsnd_hdac_ext_bus_get_ml_capabilities() may fail and its return code\nshall be checked and accounted for. Address the issue by updating the\nerror-path for avs_pci_probe().\n\nAt the same time, if the function in question succeeds but the next part\nof avs_pci_probe() fails, the hlink list shall be cleaned up before\nleaving the scope."}], "id": "CVE-2026-98055", "lastModified": "2026-10-19T10:17:59.533", "metrics": {}, "published": "2026-09-25T11:17:34.440", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/04447cd14ebcc924f2d745dd33b9506735bda5b4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2d96325e8ed97ec70623f788c35cca5d68c34351"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/498bf26639e99a98e7a3db880a7da8251aaf4289"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/559ea14b7ae7c7562b48759fa545b64958f35b73"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/68885c606a6e41dd4d3fe72f11241a6a438246ed"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a16ca1987ce8666c13482437db21232d41600e3f"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Undergoing Analysis"}

{"bugzilla": {"description": "kernel: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails", "id": "2541312", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541312"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nASoC: Intel: avs: Clean up the bus when fetching ML caps fails\nsnd_hdac_ext_bus_get_ml_capabilities() may fail and its return code\nshall be checked and accounted for. Address the issue by updating the\nerror-path for avs_pci_probe().\nAt the same time, if the function in question succeeds but the next part\nof avs_pci_probe() fails, the hlink list shall be cleaned up before\nleaving the scope.", "A flaw was found in the Linux kernel's Intel Audio Voice Studio (AVS) driver. This flaw can lead to a Denial of Service (DoS) due to improper resource cleanup during device initialization. When probing an audio device, the driver fails to check return codes from capability queries and does not release bus resources if an error occurs. A local user with administrative privileges or physical access to attach devices could trigger this initialization failure, resulting in resource exhaustion."], "name": "CVE-2026-98055", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98055\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98055\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98055.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1affc44ea5dd554c103e0ce1e809f3aa5d942349,2d96325e8ed97ec70623f788c35cca5d68c34351)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1affc44ea5dd554c103e0ce1e809f3aa5d942349,498bf26639e99a98e7a3db880a7da8251aaf4289)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1affc44ea5dd554c103e0ce1e809f3aa5d942349,04447cd14ebcc924f2d745dd33b9506735bda5b4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1affc44ea5dd554c103e0ce1e809f3aa5d942349,559ea14b7ae7c7562b48759fa545b64958f35b73)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T18:15:16.265357+00:00", "updated": "2026-09-30T09:45:07.311049+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-772"]}