5.5

CVE-2026-46262

ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()

In the Linux kernel, the following vulnerability has been resolved:

ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()

This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()").

The original patch attempted to acquire the card->controls_rwsem lock in
fsl_xcvr_mode_put(). However, this function is called from the upper ALSA
core function snd_ctl_elem_write(), which already holds the write lock on
controls_rwsem for the whole put operation. So there is no need to simply
hold the lock for fsl_xcvr_activate_ctl() again.

Acquiring the read lock while holding the write lock in the same thread
results in a deadlock and a hung task, as reported by Alexander Stein.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 6.19.1 < 6.19.4
LinuxLinux Kernel Version5.15.201
LinuxLinux Kernel Version6.1.164
LinuxLinux Kernel Version6.6.127
LinuxLinux Kernel Version6.12.74
LinuxLinux Kernel Version6.18.13
LinuxLinux Kernel Version6.19 Update-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.09% 0.007
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-667 Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f
Patch
https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711
Patch
https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448
Patch
https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e
Patch
https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c
Patch
https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a
Patch
https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2
Patch