CVE-2026-98092

Analyzed Analyzed - Analysis Complete

Memory Leak in Linux Kernel ASoC AMD YC Driver

Publication date: 2026-09-25

Last updated on: 2026-10-23

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_close() does not free the runtime->private_data buffer allocated in acp6x_pdm_dma_open(). Add the missing kfree.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-23

Generated

2026-11-08

AI Q&A

2026-09-25

EPSS Evaluated

2026-11-07

NVD

CVE-2026-98092

EUVD

EUVD-2026-86922

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 7.2.7 (exc)
linux	linux_kernel	7.3
linux	linux_kernel	From 6.13 (inc) to 6.18.53 (exc)
linux	linux_kernel	7.3
linux	linux_kernel	From 6.7 (inc) to 6.12.111 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.158 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.189 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This is a memory leak vulnerability in the Linux kernel's ASoC AMD YC driver. The function acp6x_pdm_dma_close() fails to free the runtime->private_data buffer that was allocated in acp6x_pdm_dma_open(). This causes memory to be leaked each time the DMA close function is called.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC AMD YC driver and involves a memory leak in the acp6x_pdm_dma_close function. Detection requires checking kernel logs for memory leak warnings or analyzing kernel memory usage patterns. No direct network detection commands are applicable.

Impact Analysis

The impact is limited to systems using the affected AMD ASoC YC driver with PDM DMA functionality. Memory leaks can lead to gradual system performance degradation or eventual resource exhaustion if the vulnerable function is called repeatedly.

Compliance Impact

This vulnerability is a memory leak in the Linux kernel's ASoC subsystem for AMD devices. It does not directly affect compliance with standards like GDPR or HIPAA, as those focus on data protection and privacy rather than memory management issues.

Mitigation Strategies

Update your Linux kernel to the latest patched version that includes the fix for CVE-2026-98092. This resolves the memory leak in the acp6x_pdm_dma_close function by properly freeing the runtime->private_data buffer.

Hi! I’m here to help you understand CVE-2026-98092. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...