Medium 5.5Published Sep 25, 2026

CVE-2026-98092ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()

Updated under an hour ago (Oct 27, 2026, 9:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_close() does not free the runtime->private_data buffer allocated in acp6x_pdm_dma_open(). Add the missing kfree.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 7610174a5bfe6cf34eda8f972311e629ae6dc2d1 before 28869353ab83a7fa08fe5fe7b12c84b0257a63b1; from 7610174a5bfe6cf34eda8f972311e629ae6dc2d1 before d356c188a653d31c20cd69a152b2e2ea9893180a; 7610174a5bfe6cf34eda8f972311e629ae6dc2d1 builds before 8069bc3798dd33e8e7e9ad21370ee32dcd69957c; from 7610174a5bfe6cf34eda8f972311e629ae6dc2d1 before ecd88ef5f1d208596592cfa6695ab9e240ac6a72; from 7610174a5bfe6cf34eda8f972311e629ae6dc2d1 before ac961c34cf39f66296caf8294fa5baaee4124266; 7610174a5bfe6cf34eda8f972311e629ae6dc2d1 builds before 1b67e0d3b9691d7b6b74e18960ddd2be24f9dc9d	CNA record
linux linux_kernel linux:linux_kernel	from 5.16 before 6.1.189; from 6.2 before 6.6.158; from 6.7 before 6.12.111; from 6.13 before 6.18.53; from 6.19 before 7.2.7; 7.3; 7.3	NVD

References

References

https://git.kernel.org/stable/c/28869353ab83a7fa08fe5fe7b12c84b0257a63b1	patch
https://git.kernel.org/stable/c/d356c188a653d31c20cd69a152b2e2ea9893180a	patch
https://git.kernel.org/stable/c/8069bc3798dd33e8e7e9ad21370ee32dcd69957c	patch
https://git.kernel.org/stable/c/ecd88ef5f1d208596592cfa6695ab9e240ac6a72	patch
https://git.kernel.org/stable/c/ac961c34cf39f66296caf8294fa5baaee4124266	patch
https://git.kernel.org/stable/c/1b67e0d3b9691d7b6b74e18960ddd2be24f9dc9d	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.