---
id: CVE-2026-98053
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: Intel: avs: Refactor and fix init_config access

  Existing code accesses enties found in ->init_configs array through
  indexes that are part of ->config_ids array
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: Intel: avs: Refactor and fix init_config access

  Existing code accesses enties found in ->init_configs array through
  indexes that are part of ->config_ids array. …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 8a49ef789b1be68242624d460df2ada8087308a7 <
    75bd5ea9c858d89fb8862f23afb00783bf02cd7a
  - >-
    Linux >= 8a49ef789b1be68242624d460df2ada8087308a7 <
    8f20a0f4f7d638e83ae86db1719a24c7049762f5
  - >-
    Linux >= 8a49ef789b1be68242624d460df2ada8087308a7 <
    681e91035dc794896a904852040837190e5041f5
  - Linux 6.9
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T11:17:34.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98053'
references:
  - url: 'https://git.kernel.org/stable/c/681e91035dc794896a904852040837190e5041f5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/75bd5ea9c858d89fb8862f23afb00783bf02cd7a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8f20a0f4f7d638e83ae86db1719a24c7049762f5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-25T11:06:38.845Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Refactor and fix init_config access

Existing code accesses enties found in ->init_configs array through
indexes that are part of ->config_ids array.  Those two are limited by:
->num_init_configs and ->num_config_ids respectively.  Using ID larger
or equal to ->num_init_configs leads to out-of-bounds access:

avs_path_module_send_init_configs()
loop:
	(...) &acomp->tplg->init_configs[ids[i]]
					^ out-of-bounds candidate

Rather than adding another if-statement, refactor the code.  There is no
need to store the IDs, have a list of pointers to actual config-entries
instead.  As the verification of ->init_config entries does not differ from
verification of other types that are part of the topology.c file, simply
reuse the code.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.