Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-46262

ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.14
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.

Timeline

  1. CVE published

Affected versions

  • Linux Linux

    From 5.15.201 · fixed in 5.15.202; From 6.1.164 · fixed in 6.1.165; From 6.6.127 · fixed in 6.6.128; From 6.12.74 · fixed in 6.12.75; From 6.18.13 · fixed in 6.18.14

  • Linux Linux

    6.19

References 7

git.kernel.org