CVE-2026-98308
Received Received - Intake

ALSA: hda PCM Stream Assignment Failure Trace Issue

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by static analysis and reviewed with AI-assisted source auditing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-98308
EUVD
EUVD-2026-93293

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 184865085b88789fc8a355cc16ceff25f82f63ba
Linux Linux 4.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's ALSA HDA driver where a tracepoint for PCM open events is placed incorrectly. The tracepoint attempts to access stream data before verifying if stream assignment succeeded, which could lead to issues when hardware streams are exhausted.

Impact Analysis

This vulnerability may cause system instability or crashes in the audio subsystem when hardware audio streams are exhausted. It could lead to unexpected behavior in audio applications or kernel panics in affected systems.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the ALSA hda PCM stream assignment issue. Monitor system logs for audio-related errors or failures that may indicate stream exhaustion.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98308. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart