CVE-2026-98055 ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
A missing cleanup in the Intel AVS audio driver can cause resource leaks or instability when capability fetching fails, potentially leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98055?
CVE-2026-98055 is a vulnerability in Linux, published on 25 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
snd_hdac_ext_bus_get_ml_capabilities() may fail and its return code shall be checked and accounted for. Address the issue by updating the error-path for avs_pci_probe().
At the same time, if the function in question succeeds but the next part of avs_pci_probe() fails, the hlink list shall be cleaned up before leaving the scope.
Which versions are affected by CVE-2026-98055?
How do I fix CVE-2026-98055?
Apply the vendor's patch.
Is CVE-2026-98055 being exploited?
There is no known exploitation of CVE-2026-98055 in the wild and no public exploit code.
Sources
Also known as AZL-104375, BELL-CVE-2026-98055, DEBIAN-CVE-2026-98055, GHSA-38h3-q9xp-263p, UBUNTU-CVE-2026-98055.