CVE-2026-46262
ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.
INFO
Published Date :
June 3, 2026, 6:16 p.m.
Last Modified :
June 9, 2026, 7:59 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Revert the problematic commit from the kernel.
- Ensure locks are correctly managed.
- Test for deadlocks after reverting.
- Apply the corrected patch.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-46262.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-46262 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-46262
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-46262 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-46262 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jun. 09, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-667 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19.1 up to (excluding) 6.19.4 *cpe:2.3:o:linux:linux_kernel:5.15.201:*:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.1.164:*:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12.74:*:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.18.13:*:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.6.127:*:*:*:*:*:*:* Added Reference Type kernel.org: https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 03, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein. Added Reference https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a Added Reference https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448 Added Reference https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711 Added Reference https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c Added Reference https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2 Added Reference https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f Added Reference https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e