CVE-2026-98053

Source
https://cve.org/CVERecord?id=CVE-2026-98053
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98053.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98053
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
openSUSE (1)
UBUNTU (1)
Related
Published
2026-09-25T10:24:01Z
Modified
2026-10-24T02:33:39Z
Summary
ASoC: Intel: avs: Refactor and fix init_config access
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Refactor and fix init_config access

Existing code accesses enties found in ->init_configs array through indexes that are part of ->config_ids array. Those two are limited by: ->num_init_configs and ->num_config_ids respectively. Using ID larger or equal to ->num_init_configs leads to out-of-bounds access:

avs_path_module_send_init_configs() loop: (...) &acomp->tplg->init_configs[ids[i]] ^ out-of-bounds candidate

Rather than adding another if-statement, refactor the code. There is no need to store the IDs, have a list of pointers to actual config-entries instead. As the verification of ->init_config entries does not differ from verification of other types that are part of the topology.c file, simply reuse the code.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98053.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a49ef789b1be68242624d460df2ada8087308a7
Fixed
70ffcaf86a053be99daaf3b103beac0ad7136ca3
Fixed
75bd5ea9c858d89fb8862f23afb00783bf02cd7a
Fixed
8f20a0f4f7d638e83ae86db1719a24c7049762f5
Fixed
681e91035dc794896a904852040837190e5041f5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98053.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.7

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98053.json"