CVE-2026-46262

ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()

State: Published
Severity: Not scored
Published: Jun 3, 2026
Updated: Jun 3, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()

This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()").

The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again.

Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	612ffe1f4f0499b3011f16d06e354a76dae2e2d1 to before ae5a70e3e87c28edbaf9939cfef1bcbd9615420fAffected 38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 to before 30ffcad5edb56947dccc26f6816ab7a55b21a711Affected 61e007657bf7740d54ca2aadce0fb5997839818e to before 29b2fbe3498da3681a01b34e4a2259f8a1b89448Affected daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 to before b0f74f5d24fe3c73ef1369a811891198b54c1e8eAffected cab928242853a832ffa7efda270ecfb9efeebb6e to before 9a2a5da002775376498e8814df4a87cd629a3a0cAffected f514248727606b9087bc38a284ff686e0093abf1 to before 0886dc6326c3cc596799c4340d342898301cf52aAffected f514248727606b9087bc38a284ff686e0093abf1 to before 9f16d96e1222391a6b996a1b676bec14fb91e3b2Affected 5.15.201 to before 5.15.202Affected 6.1.164 to before 6.1.165Affected 6.6.127 to before 6.6.128Affected 6.12.74 to before 6.12.75Affected 6.18.13 to before 6.18.14Affected
LinuxLinux	6.19Affected before 6.19Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.14 through 6.18.Not affected 6.19.4 through 6.19.Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

612ffe1f4f0499b3011f16d06e354a76dae2e2d1 to before ae5a70e3e87c28edbaf9939cfef1bcbd9615420fAffected
38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 to before 30ffcad5edb56947dccc26f6816ab7a55b21a711Affected
61e007657bf7740d54ca2aadce0fb5997839818e to before 29b2fbe3498da3681a01b34e4a2259f8a1b89448Affected
daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 to before b0f74f5d24fe3c73ef1369a811891198b54c1e8eAffected
cab928242853a832ffa7efda270ecfb9efeebb6e to before 9a2a5da002775376498e8814df4a87cd629a3a0cAffected
f514248727606b9087bc38a284ff686e0093abf1 to before 0886dc6326c3cc596799c4340d342898301cf52aAffected
f514248727606b9087bc38a284ff686e0093abf1 to before 9f16d96e1222391a6b996a1b676bec14fb91e3b2Affected
5.15.201 to before 5.15.202Affected
6.1.164 to before 6.1.165Affected
6.6.127 to before 6.6.128Affected
6.12.74 to before 6.12.75Affected
6.18.13 to before 6.18.14Affected

LinuxLinux

6.19Affected
before 6.19Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.14 through 6.18.*Not affected
6.19.4 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.