8.4

CVE-2026-89980

ALSA: harmony: initialize locks before requesting IRQ

In the Linux kernel, the following vulnerability has been resolved:

ALSA: harmony: initialize locks before requesting IRQ

snd_harmony_create() registers the IRQ before initializing h->lock and
h->mixer_lock. A pending interrupt can invoke the handler while these
locks are uninitialized.

Initialize both locks before requesting the IRQ so the handler always
sees valid lock state.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9af6c9203583655cb7ed45e52e14101652b37547
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < f86ff9238b0c8284909e073a681a60708b9f36ab
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 7dc239edb6d58e01c9ec868565cc03e7adf91747
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9347588bbd6ad43a85e17046d9c117a41453c52a
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 89992bda7dfbba7ded2ba4185730453c57fa65bc
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < cd209eb3136e002becbda232e399fa31a2276436
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 33abb7491e89285a41565670945293dda841afc4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/9af6c9203583655cb7ed45e52e14101652b37547
https://git.kernel.org/stable/c/f86ff9238b0c8284909e073a681a60708b9f36ab
https://git.kernel.org/stable/c/7dc239edb6d58e01c9ec868565cc03e7adf91747
https://git.kernel.org/stable/c/9347588bbd6ad43a85e17046d9c117a41453c52a
https://git.kernel.org/stable/c/89992bda7dfbba7ded2ba4185730453c57fa65bc
https://git.kernel.org/stable/c/cd209eb3136e002becbda232e399fa31a2276436
https://git.kernel.org/stable/c/33abb7491e89285a41565670945293dda841afc4