CVE-2026-80967ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex. Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe.
- CVSS
- 8.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 9bef72bdb26e291d6dffb04768741a0e49582666 before 039602d6ddb1febbb0561b30dab04461f78a1319; from 9bef72bdb26e291d6dffb04768741a0e49582666 before a5f405adb0229c9cf64eb3d695c333c92e3d3d4f; from 9bef72bdb26e291d6dffb04768741a0e49582666 before ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814; from 9bef72bdb26e291d6dffb04768741a0e49582666 before c069b3cfd753d6688ea0271c43553631ab38ce10; 9bef72bdb26e291d6dffb04768741a0e49582666 builds before 7ef9ad82d95dd3c74570d80a689a0570fbc7539e; 9bef72bdb26e291d6dffb04768741a0e49582666 builds before 7cf280fbef5db6310e1b32074c8c34d1ba459796; 9bef72bdb26e291d6dffb04768741a0e49582666 builds before 6c97817e20598e5473094e0e38d1f51f1cf4dfff | CNA record |
References
- https://git.kernel.org/stable/c/039602d6ddb1febbb0561b30dab04461f78a1319
- https://git.kernel.org/stable/c/a5f405adb0229c9cf64eb3d695c333c92e3d3d4f
- https://git.kernel.org/stable/c/ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814
- https://git.kernel.org/stable/c/c069b3cfd753d6688ea0271c43553631ab38ce10
- https://git.kernel.org/stable/c/7ef9ad82d95dd3c74570d80a689a0570fbc7539e
- https://git.kernel.org/stable/c/7cf280fbef5db6310e1b32074c8c34d1ba459796
- https://git.kernel.org/stable/c/6c97817e20598e5473094e0e38d1f51f1cf4dfff
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.