Is there a patch available for EUVD-2026-108930?

Yes, a patch is available for EUVD-2026-108930. Update the affected software to the latest version immediately.

Linux EUVD-2026-108930

| CVE-2026-98956

2026-10-23 Linux

GHSA-8vwq-3w6f-qwf5

Information Disclosure Linux

View

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ASoC: adau1372: allow sleepy powerdown GPIOs

gpiod_set_value() emits a WARN when the GPIO provider indicates that it can sleep, as is typical for I2C controlled GPIO expanders. Since the powerdown GPIO is only manipulated in process context, use the _cansleep variant instead. This lets the driver use sleepy GPIOs to power off the chip.

Affected VersionsENISA

Linux patch: 6.12.113

Linux patch: 0

Linux 5.11

Linux patch: 7.3

Linux 6cd4c6459e47402ab90802eca61a18b231434053 <58905982b0d912021325f5de84facae86cc0f2f2

Linux 6cd4c6459e47402ab90802eca61a18b231434053 <47c0c7a051b70d396774d5dc27b23283c28c3555

Linux 6cd4c6459e47402ab90802eca61a18b231434053 <64dd172bbffe6135d79a06ddad53dd2da4d8bd62

Linux patch: 7.2.11

Linux 6cd4c6459e47402ab90802eca61a18b231434053 <6cf4c3c9b7a4df0fe4cc67481b7b251cff781b29

Linux 6cd4c6459e47402ab90802eca61a18b231434053 <65cd0e21746b812d311e9fac6d473dd62f0ad52a

Linux patch: 6.6.160

Linux patch: 6.18.57

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Oct 23, 2026 - 13:17 EUVD

CVE Published

Oct 23, 2026 - 12:19 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 89% exploitable

Data Quality

3 sources

Confidence: Low

EUVD

CVE.org

EPSS MSRC

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.