What’s Vulnerable › Vulnerabilities

CVE-2026-98092: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-23
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_close() does not free the runtime->private_data buffer allocated in acp6x_pdm_dma_open(). Add the missing kfree.

Affected products

• Linux kernel: from 5.16 before 6.1.189; from 6.2 before 6.6.158; from 6.7 before 6.12.111; from 6.13 before 6.18.53; from 6.19 before 7.2.7; 7.3-rc1, 7.3-rc2 — fixed in 6.1.189, 6.12.111, 6.18.53, 6.6.158, 7.2.7

How to fix

Upgrade to a fixed version: Linux kernel 6.1.189, 6.12.111, 6.18.53, 6.6.158. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1b67e0d3b9691d7b6b74e18960ddd2be24f9dc9d
• https://git.kernel.org/stable/c/28869353ab83a7fa08fe5fe7b12c84b0257a63b1
• https://git.kernel.org/stable/c/8069bc3798dd33e8e7e9ad21370ee32dcd69957c
• https://git.kernel.org/stable/c/ac961c34cf39f66296caf8294fa5baaee4124266
• https://git.kernel.org/stable/c/d356c188a653d31c20cd69a152b2e2ea9893180a
• https://git.kernel.org/stable/c/ecd88ef5f1d208596592cfa6695ab9e240ac6a72

Get alerted when CVE-2026-98092 or the next vulnerability affects your stack