Dashboard / CVE-2026-98093

CVE-2026-98093

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-09-25 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/disable hw_params() enables mclk unconditionally and hw_free() disables it unconditionally, but the PCM core does not guarantee 1:1 pairing: hw_free() can run without hw_params(), and hw_params() can be called multiple times from the SETUP state. This triggers an "already disabled" WARN() in the first case and leaks an enable reference in the second, leaving the clock ungateable. Guard both sides with the existing mclk_flag, as fsl_sai.c does with mclk_streams.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
linux linux_kernel 6.13 – 6.18.53
linux linux_kernel 6.19 – 7.2.7
linux linux_kernel 7.3
linux linux_kernel 7.3

References & Advisories (3)

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001270
Percentile 2.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00127
2026-10-28
0.00127

Intelligence Sources

nvd ref →

External Links