---
id: CVE-2026-97909
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: sti: initialize IRQ lock before requesting IRQ

  uni_reader_init() registers the shared IRQ before initializing
  reader->irq_lock
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: sti: initialize IRQ lock before requesting IRQ

  uni_reader_init() registers the shared IRQ before initializing
  reader->irq_lock. A pending interrupt can invoke th…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-908
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    9128265f0fc8031a71775d70786052e5631aac54
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    181bb64a1333bbf3c369123d05614536f3ae7b7c
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    3a9552d18fc8174bab015bc941ede19452b184b3
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    45021eb56211431f0ef44001b7d12cce32d49261
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    f1e7b74512164314d0550ec5b62e3d40b95b0986
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    998ca92f69bc43499705016d02ffaf0663126d57
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    a42dd4dae4c9191caa017cf54cc40b6bb125be65
  - >-
    Linux >= d05d862ead8eca5e7d4ccf82d39d9189579ee5b1 <
    04405aeef4f8d7bcac6dcb1947acafdb4420c2c3
  - Linux 4.11
published: '2026-09-25'
updated: '2026-10-03'
sourceUpdated: '2026-10-03T11:18:09.177'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97909'
references:
  - url: 'https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/181bb64a1333bbf3c369123d05614536f3ae7b7c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3a9552d18fc8174bab015bc941ede19452b184b3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/45021eb56211431f0ef44001b7d12cce32d49261'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9128265f0fc8031a71775d70786052e5631aac54'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/998ca92f69bc43499705016d02ffaf0663126d57'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a42dd4dae4c9191caa017cf54cc40b6bb125be65'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f1e7b74512164314d0550ec5b62e3d40b95b0986'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97909.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-97909'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2541035'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-97909'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97909'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97909.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
epss: 0.0021
epssPercentile: 0.11179
cvssSource: vendor
ingestedAt: '2026-09-25T11:06:38.892Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ASoC: sti: initialize IRQ lock before requesting IRQ

uni_reader_init() registers the shared IRQ before initializing
reader->irq_lock. A pending interrupt can invoke the handler while the
lock is still uninitialized.

Initialize the lock before registering the IRQ so the interrupt path
always sees valid lock state.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-09-29 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97909.json)