{"id":"CVE-2026-98956","kind":"vulnerability","aliases":["CVE-2026-98956"],"related":[],"title":"Linux kernel: ADAU1372 audio driver warns on sleepy powerdown GPIOs","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: adau1372: allow sleepy powerdown GPIOs\n\ngpiod_set_value() emits a WARN when the GPIO provider indicates that it\ncan sleep, as is typical for I2C controlled GPIO expanders. Since the\npowerdown GPIO is only manipulated in process context, use the _cansleep\nvariant instead. This lets the driver use sleepy GPIOs to power off the\nchip.","summary":"In the Linux kernel's ADAU1372 audio codec driver, the powerdown GPIO was set with a call that emits a kernel warning when the GPIO expander can sleep, such as I2C-controlled expanders. The fix switches to the sleep-safe variant so the driver can power the chip off through such GPIOs.","severity":"unknown","cvss":null,"epss":0.00209,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["audio","linux-kernel","runtime"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-23T13:17:16+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T04:57:48+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-25T04:57:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: ADAU1372 audio driver warns on sleepy powerdown GPIOs","impact":"low","summary":"In the Linux kernel's ADAU1372 audio codec driver, the powerdown GPIO was set with a call that emits a kernel warning when the GPIO expander can sleep, such as I2C-controlled expanders. The fix switches to the sleep-safe variant so the driver can power the chip off through such GPIOs.","category":"runtime","nicknames":[],"who_cares":["linux-kernel","audio"],"confidence":0.5,"needs_auth":"unknown","worst_case":"kernel warning only; no code execution or data exposure described","analyst_note":"","how_to_check":"unknown","needs_analyst":false,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000506,"input_tokens":3381,"output_tokens":336,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98956':13A,16A 'adau1372':3A,27B,87C 'allow':88C 'asoc':86C 'audio':4A,17B,28B 'call':38B 'cansleep':127C 'chip':71B,141C 'codec':29B 'context':124C 'control':54B,112C 'cve':11A,14A 'driver':5A,30B,67B,133C 'emit':40B,95C 'expand':47B,55B,114C 'fix':57B 'follow':81C 'gpio':10A,33B,46B,75B,91C,100C,113C,118C,136C 'gpiod':92C 'i2c':53B,111C 'i2c-controlled':52B 'indic':102C 'instead':129C 'kernel':2A,20B,25B,42B,79C 'let':131C 'linux':1A,19B,24B,78C 'linux-kernel':18B 'manipul':121C 'power':69B,138C 'powerdown':9A,32B,90C,117C 'process':123C 'provid':101C 'resolv':85C 'runtim':21B 'safe':63B 'set':35B,93C 'sinc':115C 'sleep':49B,62B,106C 'sleep-saf':61B 'sleepi':8A,89C,135C 'switch':58B 'typic':109C 'use':125C,134C 'valu':94C 'variant':64B,128C 'vulner':82C 'warn':6A,43B,97C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T13:17:16+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98956","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98956","severity":null,"published_at":"2026-10-23T13:17:16+00:00","modified_at":"2026-10-23T13:17:16+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-98956","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98956","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}