CVE-2023-54096

soundwire: fix enumeration completion

State: Published
Severity: 7.8 High
Published: Dec 24, 2025
Updated: Aug 5, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

soundwire: fix enumeration completion

The soundwire subsystem uses two completion structures that allow drivers to wait for soundwire device to become enumerated on the bus and initialised by their drivers, respectively.

The code implementing the signalling is currently broken as it does not signal all current and future waiters and also uses the wrong reinitialisation function, which can potentially lead to memory corruption if there are still waiters on the queue.

Not signalling future waiters specifically breaks sound card probe deferrals as codec drivers can not tell that the soundwire device is already attached when being reprobed. Some codec runtime PM implementations suffer from similar problems as waiting for enumeration during resume can also timeout despite the device already having been enumerated.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before 48d1d0ce0782f995fda678508fdae35c5e9593f0Affected fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before a36b522767f3a72688893a472e80c9aa03e67edaAffected fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before e1d54962a63b6ec04ed0204a3ecca942fde3a6feAffected fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before c5265691cd065464d795de5666dcfb89c26b9bc1Affected fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before c40d6b3249b11d60e09d81530588f56233d9aa44Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.190 through 5.10.Not affected 5.15.126 through 5.15.Not affected 6.1.43 through 6.1.Not affected 6.4.8 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before 48d1d0ce0782f995fda678508fdae35c5e9593f0Affected
fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before a36b522767f3a72688893a472e80c9aa03e67edaAffected
fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before e1d54962a63b6ec04ed0204a3ecca942fde3a6feAffected
fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before c5265691cd065464d795de5666dcfb89c26b9bc1Affected
fb9469e54fa7a7b6a8137c40ae66c41b8d0ab175 to before c40d6b3249b11d60e09d81530588f56233d9aa44Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.190 through 5.10.*Not affected
5.15.126 through 5.15.*Not affected
6.1.43 through 6.1.*Not affected
6.4.8 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.