CVE-2026-46262None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The origi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.09%
In the Linux kernel, the following vulnerability has been resolved:
ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()").
The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again.
Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.
Linux >= 612ffe1f4f0499b3011f16d06e354a76dae2e2d1 < ae5a70e3e87c28edbaf9939cfef1bcbd9615420fLinux >= 38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 < 30ffcad5edb56947dccc26f6816ab7a55b21a711Linux >= 61e007657bf7740d54ca2aadce0fb5997839818e < 29b2fbe3498da3681a01b34e4a2259f8a1b89448Linux >= daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 < b0f74f5d24fe3c73ef1369a811891198b54c1e8eLinux >= cab928242853a832ffa7efda270ecfb9efeebb6e < 9a2a5da002775376498e8814df4a87cd629a3a0cLinux >= f514248727606b9087bc38a284ff686e0093abf1 < 0886dc6326c3cc596799c4340d342898301cf52aLinux >= f514248727606b9087bc38a284ff686e0093abf1 < 9f16d96e1222391a6b996a1b676bec14fb91e3b2Linux >= 5.15.201 < 5.15.202Linux >= 6.1.164 < 6.1.165Linux >= 6.6.127 < 6.6.128Linux >= 6.12.74 < 6.12.75Linux >= 6.18.13 < 6.18.14Linux 6.19Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses