{"id":"CVE-2026-46262","title":"ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()\n\nThis reverts commit f51424872760 (\"ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()\").\n\nThe origi…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 612ffe1f4f0499b3011f16d06e354a76dae2e2d1 < ae5a70e3e87c28edbaf9939cfef1bcbd9615420f","Linux >= 38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 < 30ffcad5edb56947dccc26f6816ab7a55b21a711","Linux >= 61e007657bf7740d54ca2aadce0fb5997839818e < 29b2fbe3498da3681a01b34e4a2259f8a1b89448","Linux >= daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 < b0f74f5d24fe3c73ef1369a811891198b54c1e8e","Linux >= cab928242853a832ffa7efda270ecfb9efeebb6e < 9a2a5da002775376498e8814df4a87cd629a3a0c","Linux >= f514248727606b9087bc38a284ff686e0093abf1 < 0886dc6326c3cc596799c4340d342898301cf52a","Linux >= f514248727606b9087bc38a284ff686e0093abf1 < 9f16d96e1222391a6b996a1b676bec14fb91e3b2","Linux >= 5.15.201 < 5.15.202","Linux >= 6.1.164 < 6.1.165","Linux >= 6.6.127 < 6.6.128","Linux >= 6.12.74 < 6.12.75","Linux >= 6.18.13 < 6.18.14","Linux 6.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:13:08.973644Z"},"published":"2026-06-03","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:13:46.776Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46262","references":[{"url":"https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f"},{"url":"https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711"},{"url":"https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448"},{"url":"https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e"},{"url":"https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c"},{"url":"https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a"},{"url":"https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2"}],"tags":["cve.org"],"epss":0.00091,"epssPercentile":0.00473,"ingestedAt":"2026-11-06T16:57:43.319Z","slug":"CVE-2026-46262","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()\n\nThis reverts commit f51424872760 (\"ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()\").\n\nThe original patch attempted to acquire the card->controls_rwsem lock in\nfsl_xcvr_mode_put(). However, this function is called from the upper ALSA\ncore function snd_ctl_elem_write(), which already holds the write lock on\ncontrols_rwsem for the whole put operation. So there is no need to simply\nhold the lock for fsl_xcvr_activate_ctl() again.\n\nAcquiring the read lock while holding the write lock in the same thread\nresults in a deadlock and a hung task, as reported by Alexander Stein.\n\n## Affected\n\n- `Linux >= 612ffe1f4f0499b3011f16d06e354a76dae2e2d1 < ae5a70e3e87c28edbaf9939cfef1bcbd9615420f`\n- `Linux >= 38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 < 30ffcad5edb56947dccc26f6816ab7a55b21a711`\n- `Linux >= 61e007657bf7740d54ca2aadce0fb5997839818e < 29b2fbe3498da3681a01b34e4a2259f8a1b89448`\n- `Linux >= daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 < b0f74f5d24fe3c73ef1369a811891198b54c1e8e`\n- `Linux >= cab928242853a832ffa7efda270ecfb9efeebb6e < 9a2a5da002775376498e8814df4a87cd629a3a0c`\n- `Linux >= f514248727606b9087bc38a284ff686e0093abf1 < 0886dc6326c3cc596799c4340d342898301cf52a`\n- `Linux >= f514248727606b9087bc38a284ff686e0093abf1 < 9f16d96e1222391a6b996a1b676bec14fb91e3b2`\n- `Linux >= 5.15.201 < 5.15.202`\n- `Linux >= 6.1.164 < 6.1.165`\n- `Linux >= 6.6.127 < 6.6.128`\n- `Linux >= 6.12.74 < 6.12.75`\n- `Linux >= 6.18.13 < 6.18.14`\n- `Linux 6.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}