CVE-2026-98956

None

CVSS

—

EPSS

0.2%

Published

Oct 23, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A small driver change stops unnecessary warning messages when certain audio hardware powers down using slower control chips.

Exploitation: Other
Attacker needs: Other
Complexity: Theoretical
Impact: Other
Component: OS kernel
Class: Other
Remediation: Upgrade
Effort: Low
Patch risk: None

What it actually does

The ASoC adau1372 driver called gpiod_set_value() on a powerdown GPIO that may be backed by a sleeping provider such as an I2C expander, causing a WARN_ON in process context.

Why it matters to the business

Audio devices using I2C GPIO expanders for codec power control produce spurious kernel warnings during normal power-down sequences, complicating diagnostics and log review on affected systems.

How an attack unfolds

No attacker exploitation is possible; the change is a defensive coding correction that replaces a non-sleeping GPIO call with its cansleep variant to eliminate an erroneous warning when the GPIO provider sleeps.

How to fix it

Apply the upstream kernel commit that switches the powerdown GPIO calls to the _cansleep variants; rebuild and deploy the updated kernel image on affected systems.

How to confirm the fix worked

Boot a kernel containing the fix, exercise audio power-down paths with an I2C GPIO expander, and confirm absence of the previous gpiod_set_value WARN messages in the kernel log.

How to detect it

Search kernel logs for WARN messages originating from gpiod_set_value when the adau1372 driver manipulates its powerdown GPIO.

What your security team should do

Prioritize kernel update on systems using adau1372 with I2C-based GPIO expanders within normal patch cycles.
Review kernel logs for gpiod_set_value warnings on audio platforms to identify exposure.
Track LTS or distribution kernel releases that incorporate the fix.

The record

In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod_set_value() emits a WARN when the GPIO provider indicates that it can sleep, as is typical for I2C controlled GPIO expanders. Since the powerdown GPIO is only manipulated in process context, use the _cansleep variant instead. This lets the driver use sleepy GPIOs to power off the chip.

Affected packages

Ecosystem	Package	Introduced	Fixed