{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98054", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:19:56.072Z", "datePublished": "2026-09-25T10:24:01.701Z", "dateUpdated": "2026-09-25T10:24:01.701Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-25T10:24:01.701Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: avs: Fix unbalanced module reference count\n\nstrace_open() invokes try_module_get() which on success takes\nthe module reference. If any follow up operation causes\nstrace_open() to fail, the refcount shall be put down."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/intel/avs/debugfs.c"], "versions": [{"version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "lessThan": "3fcf670f023d47e4eb970fb886ee562b5bdfbee7", "status": "affected", "versionType": "git"}, {"version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "lessThan": "23ebd4ed5799340f1d2193195c97f61d39aa9899", "status": "affected", "versionType": "git"}, {"version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "lessThan": "60b396b2aeca303bc468937d2b44a82399f37b3c", "status": "affected", "versionType": "git"}, {"version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "lessThan": "d4fa6f94b91137e329ea3f5b360e140b227bb696", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/intel/avs/debugfs.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.3-rc3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/3fcf670f023d47e4eb970fb886ee562b5bdfbee7"}, {"url": "https://git.kernel.org/stable/c/23ebd4ed5799340f1d2193195c97f61d39aa9899"}, {"url": "https://git.kernel.org/stable/c/60b396b2aeca303bc468937d2b44a82399f37b3c"}, {"url": "https://git.kernel.org/stable/c/d4fa6f94b91137e329ea3f5b360e140b227bb696"}], "title": "ASoC: Intel: avs: Fix unbalanced module reference count", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/intel/avs/debugfs.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "3fcf670f023d47e4eb970fb886ee562b5bdfbee7", "status": "affected", "version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "versionType": "git"}, {"lessThan": "23ebd4ed5799340f1d2193195c97f61d39aa9899", "status": "affected", "version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "versionType": "git"}, {"lessThan": "60b396b2aeca303bc468937d2b44a82399f37b3c", "status": "affected", "version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "versionType": "git"}, {"lessThan": "d4fa6f94b91137e329ea3f5b360e140b227bb696", "status": "affected", "version": "0a5fb3cc28fda52c761775db2ccb7ccb954aee2a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/intel/avs/debugfs.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"lessThan": "6.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: avs: Fix unbalanced module reference count\n\nstrace_open() invokes try_module_get() which on success takes\nthe module reference. If any follow up operation causes\nstrace_open() to fail, the refcount shall be put down."}], "id": "CVE-2026-98054", "lastModified": "2026-09-25T11:17:34.330", "metrics": {}, "published": "2026-09-25T11:17:34.330", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/23ebd4ed5799340f1d2193195c97f61d39aa9899"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3fcf670f023d47e4eb970fb886ee562b5bdfbee7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/60b396b2aeca303bc468937d2b44a82399f37b3c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d4fa6f94b91137e329ea3f5b360e140b227bb696"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ASoC: Intel: avs: Fix unbalanced module reference count", "id": "2541067", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541067"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-911", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nASoC: Intel: avs: Fix unbalanced module reference count\nstrace_open() invokes try_module_get() which on success takes\nthe module reference. If any follow up operation causes\nstrace_open() to fail, the refcount shall be put down.", "A flaw was found in the Linux kernel's Intel Audio Voice Speech (AVS) sound driver. When an error occurs while opening the driver's debugfs trace interface, the kernel fails to release a previously acquired module reference count. A local user with access to the interface can exploit this issue by triggering initialization failures, causing an unbalanced reference count that prevents the module from unloading and leads to a denial of service (DoS)."], "name": "CVE-2026-98054", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98054\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98054\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98054.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a5fb3cc28fda52c761775db2ccb7ccb954aee2a,3fcf670f023d47e4eb970fb886ee562b5bdfbee7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a5fb3cc28fda52c761775db2ccb7ccb954aee2a,23ebd4ed5799340f1d2193195c97f61d39aa9899)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a5fb3cc28fda52c761775db2ccb7ccb954aee2a,60b396b2aeca303bc468937d2b44a82399f37b3c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a5fb3cc28fda52c761775db2ccb7ccb954aee2a,d4fa6f94b91137e329ea3f5b360e140b227bb696)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc3,*)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T16:30:15.788887+00:00", "updated": "2026-09-29T20:00:19.582780+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-665", "CWE-911"]}