CVE-2026-97909ASoC: sti: initialize IRQ lock before requesting IRQ
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: initialize IRQ lock before requesting IRQ uni_reader_init() registers the shared IRQ before initializing reader->irq_lock. A pending interrupt can invoke the handler while the lock is still uninitialized. Initialize the lock before registering the IRQ so the interrupt path always sees valid lock state.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 9128265f0fc8031a71775d70786052e5631aac54; from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 181bb64a1333bbf3c369123d05614536f3ae7b7c; from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 3a9552d18fc8174bab015bc941ede19452b184b3; from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 45021eb56211431f0ef44001b7d12cce32d49261; from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before f1e7b74512164314d0550ec5b62e3d40b95b0986; from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 998ca92f69bc43499705016d02ffaf0663126d57; from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before a42dd4dae4c9191caa017cf54cc40b6bb125be65; from d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 04405aeef4f8d7bcac6dcb1947acafdb4420c2c3 | CNA record |
References
- https://git.kernel.org/stable/c/9128265f0fc8031a71775d70786052e5631aac54
- https://git.kernel.org/stable/c/181bb64a1333bbf3c369123d05614536f3ae7b7c
- https://git.kernel.org/stable/c/3a9552d18fc8174bab015bc941ede19452b184b3
- https://git.kernel.org/stable/c/45021eb56211431f0ef44001b7d12cce32d49261
- https://git.kernel.org/stable/c/f1e7b74512164314d0550ec5b62e3d40b95b0986
- https://git.kernel.org/stable/c/998ca92f69bc43499705016d02ffaf0663126d57
- https://git.kernel.org/stable/c/a42dd4dae4c9191caa017cf54cc40b6bb125be65
- https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.