{"schema":"threatline.record/2","record":{"id":"CVE-2026-97909","aliases":[],"summary":"ASoC: sti: initialize IRQ lock before requesting IRQ","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: sti: initialize IRQ lock before requesting IRQ\n\nuni_reader_init() registers the shared IRQ before initializing\nreader->irq_lock. A pending interrupt can invoke the handler while the\nlock is still uninitialized.\n\nInitialize the lock before registering the IRQ so the interrupt path\nalways sees valid lock state.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"9128265f0fc8031a71775d70786052e5631aac54","status":"affected","versionType":"git"},{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"181bb64a1333bbf3c369123d05614536f3ae7b7c","status":"affected","versionType":"git"},{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"3a9552d18fc8174bab015bc941ede19452b184b3","status":"affected","versionType":"git"},{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"45021eb56211431f0ef44001b7d12cce32d49261","status":"affected","versionType":"git"},{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"f1e7b74512164314d0550ec5b62e3d40b95b0986","status":"affected","versionType":"git"},{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"998ca92f69bc43499705016d02ffaf0663126d57","status":"affected","versionType":"git"},{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"a42dd4dae4c9191caa017cf54cc40b6bb125be65","status":"affected","versionType":"git"},{"version":"d05d862ead8eca5e7d4ccf82d39d9189579ee5b1","lessThan":"04405aeef4f8d7bcac6dcb1947acafdb4420c2c3","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"4.11","status":"affected"},{"version":"0","lessThan":"4.11","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"9128265f0fc8031a71775d70786052e5631aac54","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"181bb64a1333bbf3c369123d05614536f3ae7b7c","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"3a9552d18fc8174bab015bc941ede19452b184b3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"45021eb56211431f0ef44001b7d12cce32d49261","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"998ca92f69bc43499705016d02ffaf0663126d57","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","source_modified_at":"2026-10-19T09:10:35.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"04405aeef4f8d7bcac6dcb1947acafdb4420c2c3","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.0021,"percentile":0.10717,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:22:33.435Z","modified_at":"2026-10-19T09:10:35.607Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97909","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:10:35.607Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97909","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/9128265f0fc8031a71775d70786052e5631aac54"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/181bb64a1333bbf3c369123d05614536f3ae7b7c"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/3a9552d18fc8174bab015bc941ede19452b184b3"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/45021eb56211431f0ef44001b7d12cce32d49261"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/f1e7b74512164314d0550ec5b62e3d40b95b0986"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/998ca92f69bc43499705016d02ffaf0663126d57"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/a42dd4dae4c9191caa017cf54cc40b6bb125be65"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:10:35.607Z","content_hash":"9e325319bd7ae3676d769202d715ab5dfc2cf46ac56c2fdbbd002b13d8f0c4c6"}}