CVE-2026-98264
Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: reset device before deleting virtqueues virtsnd_remove() and virtsnd_freeze() delete the virtqueues before resetting the device. del_vqs() frees the vring backing, but does not provide a generic device quiesce operation. In particular, modern virtio-pci keeps enabled queues active until the device is reset. Reset the device before deleting the virtqueues so it can no longer access the vring memory when that memory is released. This also covers probe failures after DRIVER_OK, which unwind through virtsnd_remove().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-98264
EUVD
EUVD-2026-93192

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
Linux Linux de3a9980d8c34b2479173e809afa820473db676a
Linux Linux de3a9980d8c34b2479173e809afa820473db676a
Linux Linux de3a9980d8c34b2479173e809afa820473db676a
Linux Linux de3a9980d8c34b2479173e809afa820473db676a
Linux Linux de3a9980d8c34b2479173e809afa820473db676a
Linux Linux de3a9980d8c34b2479173e809afa820473db676a
Linux Linux 5.13

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of virtqueues in the ALSA subsystem for virtio devices. The issue occurs when the device is not reset before deleting virtqueues, which can lead to the device still accessing vring memory after it has been freed. This happens because del_vqs() does not provide a generic device quiesce operation, and modern virtio-pci keeps queues active until reset.

Detection Guidance

This vulnerability is specific to the Linux kernel's ALSA virtio driver. Detection requires checking kernel logs for virtio sound device errors or examining kernel version against patched releases. Commands: dmesg | grep virtio, uname -a, and checking for ALSA virtio driver usage in system logs.

Impact Analysis

This vulnerability could allow a malicious guest to potentially access freed memory or cause a denial of service by exploiting the race condition between virtqueue deletion and device access. It primarily affects systems using virtio sound devices in virtualized environments.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a Linux kernel issue involving virtio device handling. No evidence suggests data exposure or privacy violations that would impact regulatory compliance.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-98264. If immediate patching is not possible, disable the ALSA virtio sound driver by blacklisting the module or removing virtio sound device support until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98264. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart