CVE-2026-46262

MEDIUM EPSS 0.6%
Published Jun 3, 20263w ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 3, 2026 3w ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
0.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-667

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥6.19.1  –  <6.19.4
linuxlinux_kernel5.15.201any
linuxlinux_kernel6.1.164any
linuxlinux_kernel6.6.127any
linuxlinux_kernel6.12.74any
linuxlinux_kernel6.18.13any
linuxlinux_kernel6.19any

References 7

  • git.kernel.org https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e
    Patch