CVE-2026-98092

This vulnerability arises from the missing deallocation of a buffer allocated in acp6x_pdm_dma_open() that is not freed in acp6x_pdm_dma_close(). The result is a memory leak within the Linux kernel's AMD ASoC audio driver. Based on the description, it is inferred that repeated opening and closing of the device can cause kernel heap exhaustion, which might degrade system performance or lead to a denial‑of‑service situation.

Any Linux kernel configuration that includes the AMD ASoC driver and does not contain the commit adding the missing kfree is affected. The issue applies to all kernel versions preceding the patch commits referenced in the CVE. The vendor recommendation is that packages be updated to a kernel that incorporates the fix.

Exploitation would require the ability to execute code that triggers the open and close path of the AMD ASoC driver, which effectively means privileged access or prior compromise. No public exploits are documented, the vulnerability is not listed in CISA's KEV catalog, and the EPSS score is < 1%. The potential for denial‑of‑service is inferred from the memory‑leak nature of the flaw, but the severity is limited by the need for kernel‑execution privileges.