All vulnerabilities
CVE-2026-97909

Linux: ASoC: sti: initialize IRQ lock before requesting IRQ

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9128265f0fc8031a71775d70786052e5631aac54Also 181bb64a1333bbf3c369123d05614536f3ae7b7c, 3a9552d18fc8174bab015bc941ede19452b184b3 and 3 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 9128265f0fc8031a71775d70786052e5631aac54LinuxCVE List
  • 181bb64a1333bbf3c369123d05614536f3ae7b7cLinuxCVE List
  • 3a9552d18fc8174bab015bc941ede19452b184b3LinuxCVE List
  • 45021eb56211431f0ef44001b7d12cce32d49261LinuxCVE List
  • 998ca92f69bc43499705016d02ffaf0663126d57LinuxCVE List
  • 04405aeef4f8d7bcac6dcb1947acafdb4420c2c3LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: sti: initialize IRQ lock before requesting IRQ

uni_reader_init() registers the shared IRQ before initializing reader->irq_lock. A pending interrupt can invoke the handler while the lock is still uninitialized.

Initialize the lock before registering the IRQ so the interrupt path always sees valid lock state.

Text from CVE List

Affected versions 18

  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 9128265f0fc8031a71775d70786052e5631aac54CVE List
  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 181bb64a1333bbf3c369123d05614536f3ae7b7cCVE List
  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 3a9552d18fc8174bab015bc941ede19452b184b3CVE List
  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 45021eb56211431f0ef44001b7d12cce32d49261CVE List
  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before f1e7b74512164314d0550ec5b62e3d40b95b0986CVE List
  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 998ca92f69bc43499705016d02ffaf0663126d57CVE List
  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before a42dd4dae4c9191caa017cf54cc40b6bb125be65CVE List
  • Linuxaffected: d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 before 04405aeef4f8d7bcac6dcb1947acafdb4420c2c3CVE List
  • Linuxaffected: 4.11CVE List
  • Linuxunaffected: all versions before 4.11CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8