CVE-2026-98053

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Access in Linux Kernel ASoC AVS

Publication date: 2026-09-25

Last updated on: 2026-10-06

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Refactor and fix init_config access Existing code accesses enties found in ->init_configs array through indexes that are part of ->config_ids array. Those two are limited by: ->num_init_configs and ->num_config_ids respectively. Using ID larger or equal to ->num_init_configs leads to out-of-bounds access: avs_path_module_send_init_configs() loop: (...) &acomp->tplg->init_configs[ids[i]] ^ out-of-bounds candidate Rather than adding another if-statement, refactor the code. There is no need to store the IDs, have a list of pointers to actual config-entries instead. As the verification of ->init_config entries does not differ from verification of other types that are part of the topology.c file, simply reuse the code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-06

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-98053

EUVD

EUVD-2026-86706

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 7.2.7 (exc)
linux	linux_kernel	7.3
linux	linux_kernel	7.3
linux	linux_kernel	From 6.9 (inc) to 6.18.53 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves an out-of-bounds access issue in the ASoC (ALSA System on Chip) Intel AVS driver. The code incorrectly accesses entries in the init_configs array using indexes from the config_ids array, which can lead to memory corruption or crashes if the index exceeds the valid range.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC Intel AVS subsystem and involves out-of-bounds access in init_config handling. Detection requires checking the kernel version and examining the affected subsystem code. Use commands like 'uname -a' to check kernel version and 'grep -r init_configs /lib/modules/$(uname -r)/' to inspect relevant code paths.

Impact Analysis

This vulnerability could allow an attacker with local access to trigger a system crash or potentially execute arbitrary code with kernel privileges. It may lead to denial-of-service conditions or compromise the integrity and security of the affected system.

Compliance Impact

This vulnerability is a Linux kernel out-of-bounds access issue in the ASoC Intel AVS subsystem. It does not directly relate to data privacy, security controls, or compliance requirements under standards like GDPR or HIPAA. The impact is limited to potential system instability or crashes due to memory corruption in audio subsystem initialization.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch this vulnerability. If no patch is available, consider disabling the affected ASoC Intel AVS module by blacklisting it or restricting access to topology.c file modifications. Monitor vendor advisories for updates.

Hi! I’m here to help you understand CVE-2026-98053. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70