CVE-2026-98054: ASoC: Intel: avs: Fix unbalanced module reference count
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix unbalanced module reference count
straceopen() invokes trymoduleget() which on success takes the module reference. If any follow up operation causes straceopen() to fail, the refcount shall be put down.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure that strace_open() releases the module reference by decrementing the refcount when any follow-up operation causes strace_open() to fail.
Event History
Frequently Asked Questions
Which systems should be prioritized for review?
Prioritize Linux systems that use the Intel AVS ASoC driver. The issue is in the driver’s module-reference handling during an open path that later fails.
What is the practical effect of the defect?
A successful module reference acquisition can remain unbalanced when a subsequent operation causes the open path to fail. This leaves the module reference count elevated instead of releasing it on the failure path.
Are affected or fixed kernel versions identified?
No affected or fixed kernel version ranges are provided. Three stable-tree commit references are supplied for the resolved change.