Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-89980

ALSA: harmony: initialize locks before requesting IRQ

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.221, 6.1.188, 6.6.157, 6.12.110, 6.18.51, and 1 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the IRQ before initializing h->lock and h->mixer_lock. A pending interrupt can invoke the handler while these locks are uninitialized. Initialize both locks before requesting the IRQ so the handler always sees valid lock state.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 9af6c9203583655cb7ed45e52e14101652b37547; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in f86ff9238b0c8284909e073a681a60708b9f36ab; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 7dc239edb6d58e01c9ec868565cc03e7adf91747; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 9347588bbd6ad43a85e17046d9c117a41453c52a; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 89992bda7dfbba7ded2ba4185730453c57fa65bc; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in cd209eb3136e002becbda232e399fa31a2276436; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 33abb7491e89285a41565670945293dda841afc4

  • Linux Linux

    2.6.12

  • KernelLinux

    From 2.6.12 · fixed in 5.15.221; From 5.16.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.51; From 6.19.0 · fixed in 7.2.5

References 7

git.kernel.org