CVE-2026-98055: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails

Published Sep 25, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Clean up the bus when fetching ML caps fails

sndhdacextbusgetmlcapabilities() may fail and its return code shall be checked and accounted for. Address the issue by updating the error-path for avspciprobe().

At the same time, if the function in question succeeds but the next part of avspciprobe() fails, the hlink list shall be cleaned up before leaving the scope.

Affected Software

1 affected component
Linux Linux kernel

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Compensating control

    Update avs_pci_probe() to check and account for the return code from snd_hdac_ext_bus_get_ml_capabilities(), and clean up the hlink list before leaving the function when a subsequent step fails.

Event History

Sep 25, 2026
CVE Published
via MITRE·10:24 AM
Data Sourced
via MITRE·10:24 AM
Description

Frequently Asked Questions

1

Under what condition is the affected error path reached?

It is reached when snd_hdac_ext_bus_get_ml_capabilities() fails during avs_pci_probe(). A related cleanup issue also occurs if capability retrieval succeeds but a later portion of avs_pci_probe() fails.

2

What state is left uncleared on these probe failures?

The bus must be cleaned up when ML capability retrieval fails. If a subsequent probe step fails after successful capability retrieval, the hlink list must also be cleaned up before returning.

3

Is a fix available?

Yes. The provided references point to three stable Linux kernel commits containing the resolution. The supplied data does not identify the kernel versions that include those commits.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203