{"id":"CVE-2026-98817","kind":"vulnerability","aliases":["CVE-2026-98817"],"related":[],"title":"Linux kernel: SDCA audio probe leaves runtime PM reference unbalanced on error","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SDCA: Add better pm_runtime error handling in func probe\n\nAdd a common error path in probe that balances the runtime PM reference.","summary":"The Linux kernel's ASoC SDCA audio function probe lacked a common error path, so a failed probe could leave a runtime power management reference unreleased. The sources do not describe any attacker-reachable effect beyond this resource handling bug.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["audio","infrastructure","kernel","linux"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:35+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","triaged_at":"2026-10-25T05:14:44+00:00","updated_at":"2026-10-25T05:14:44+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:14:44Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"unknown","title":"Linux kernel: SDCA audio probe leaves runtime PM reference unbalanced on error","impact":"low","summary":"The Linux kernel's ASoC SDCA audio function probe lacked a common error path, so a failed probe could leave a runtime power management reference unreleased. The sources do not describe any attacker-reachable effect beyond this resource handling bug.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","audio"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the kernel stable commit and NVD entry for affected kernel versions and the actual consequence of the leaked reference.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000499,"input_tokens":3288,"output_tokens":341,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-98817':15A,18A 'add':76C,85C 'asoc':27B,74C 'attack':56B 'attacker-reach':55B 'audio':4A,19B,29B 'balanc':93C 'better':77C 'beyond':59B 'bug':63B 'common':34B,87C 'could':41B 'cve':13A,16A 'describ':53B 'effect':58B 'error':12A,35B,80C,88C 'fail':39B 'follow':69C 'func':83C 'function':30B 'handl':62B,81C 'infrastructur':20B 'kernel':2A,21B,25B,67C 'lack':32B 'leav':6A,42B 'linux':1A,22B,24B,66C 'manag':46B 'path':36B,89C 'pm':8A,78C,96C 'power':45B 'probe':5A,31B,40B,84C,91C 'reachabl':57B 'refer':9A,47B,97C 'resolv':73C 'resourc':61B 'runtim':7A,44B,79C,95C 'sdca':3A,28B,75C 'sourc':50B 'unbalanc':10A 'unreleas':48B 'vulner':70C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:35+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98817","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98817","severity":null,"published_at":"2026-10-18T16:17:35+00:00","modified_at":"2026-10-19T10:19:45+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}