{"id":"CVE-2026-98779","kind":"vulnerability","aliases":["CVE-2026-98779"],"related":[],"title":"Linux kernel: AMD ACP audio init failure leaks platform devices","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix ACP MFD device leak on init failure\n\nacp_hw_init() registers ACP child devices with mfd_add_devices() before\nattaching them to the ACP power domain and initializing the hardware.\n\nIf attaching a child to the power domain fails, or if the ACP reset or\nclock enable operation times out, the failure path frees only the\nsource cell, resource, and platform-data allocations. The child\nplatform devices already registered by mfd_add_devices() remain\nregistered and are never released.\n\nRemove the children from the power domain and unregister the MFD\ndevices on failures that occur after mfd_add_devices() succeeds. Keep\nmfd_add_devices() failures on the existing cleanup path since the MFD\ncore already rolls back partially registered children itself.\n\nThe issue was identified by a static analysis tool I developed and\nconfirmed by manual review.\n\n(cherry picked from commit 63da68d6a2279ec945581c990c5a59a5ae8b5560)","summary":"When the AMD ACP audio block fails to initialize, the amdgpu driver leaves its child platform devices registered instead of removing them. This is a resource leak in the kernel driver, and the sources do not describe any attacker-reachable effect.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-gpu","kernel","linux","runtime"],"not_affected_if":["non-amd-hardware"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:31+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:15:23+00:00","updated_at":"2026-10-25T05:15:23+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-25T05:15:23Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: AMD ACP audio init failure leaks platform devices","impact":"low","summary":"When the AMD ACP audio block fails to initialize, the amdgpu driver leaves its child platform devices registered instead of removing them. This is a resource leak in the kernel driver, and the sources do not describe any attacker-reachable effect.","category":"runtime","nicknames":[],"who_cares":["linux","amd-gpu","kernel"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; a leak on an init failure path","analyst_note":"Check the NVD entry and the upstream kernel commit 63da68d6a2279ec945581c990c5a59a5ae8b5560 for affected kernel versions and the fixed stable release.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["non-amd-hardware"],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000543,"input_tokens":3557,"output_tokens":374,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98779':13A,16A '63da68d6a2279ec945581c990c5a59a5ae8b5560':219C 'acp':4A,26B,77C,84C,88C,100C,119C 'add':93C,149C,175C,180C 'alloc':140C 'alreadi':145C,192C 'amd':3A,18B,25B 'amd-gpu':17B 'amdgpu':33B 'analysi':206C 'attach':96C,108C 'attack':62B 'attacker-reach':61B 'audio':5A,27B 'back':194C 'block':28B 'cell':134C 'cherri':215C 'child':37B,89C,110C,142C 'children':159C,197C 'cleanup':186C 'clock':122C 'commit':218C 'confirm':211C 'core':191C 'cve':11A,14A 'data':139C 'describ':59B 'develop':209C 'devic':10A,39B,79C,90C,94C,144C,150C,168C,176C,181C 'domain':102C,114C,163C 'driver':34B,53B 'drm/amdgpu':75C 'effect':64B 'enabl':123C 'exist':185C 'fail':29B,115C 'failur':7A,83C,128C,170C,182C 'fix':76C 'follow':70C 'free':130C 'gpu':19B 'hardwar':106C 'hw':85C 'identifi':202C 'init':6A,82C,86C 'initi':31B,104C 'instead':41B 'issu':200C 'keep':178C 'kernel':2A,20B,52B,68C 'leak':8A,49B,80C 'leav':35B 'linux':1A,21B,67C 'manual':213C 'mfd':78C,92C,148C,167C,174C,179C,190C 'never':155C 'occur':172C 'oper':124C 'partial':195C 'path':129C,187C 'pick':216C 'platform':9A,38B,138C,143C 'platform-data':137C 'power':101C,113C,162C 'reachabl':63B 'regist':40B,87C,146C,152C,196C 'releas':156C 'remain':151C 'remov':43B,157C 'reset':120C 'resolv':74C 'resourc':48B,135C 'review':214C 'roll':193C 'runtim':22B 'sinc':188C 'sourc':56B,133C 'static':205C 'succeed':177C 'time':125C 'tool':207C 'unregist':165C 'vulner':71C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98779","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98779","severity":null,"published_at":"2026-10-18T16:17:31+00:00","modified_at":"2026-10-21T13:21:45+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}