CVE-2026-80967

ALSA: pcxhr: initialize mutexes before requesting threaded IRQ

State: Published
Severity: 8.4 High
Published: Sep 11, 2026
Updated: Oct 30, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcxhr: initialize mutexes before requesting threaded IRQ

pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex.

Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9bef72bdb26e291d6dffb04768741a0e49582666 to before 20a0f80f67a1495a57e5a3ba0fa172a0f919691dAffected 9bef72bdb26e291d6dffb04768741a0e49582666 to before 039602d6ddb1febbb0561b30dab04461f78a1319Affected 9bef72bdb26e291d6dffb04768741a0e49582666 to before a5f405adb0229c9cf64eb3d695c333c92e3d3d4fAffected 9bef72bdb26e291d6dffb04768741a0e49582666 to before ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814Affected 9bef72bdb26e291d6dffb04768741a0e49582666 to before c069b3cfd753d6688ea0271c43553631ab38ce10Affected 9bef72bdb26e291d6dffb04768741a0e49582666 to before 7ef9ad82d95dd3c74570d80a689a0570fbc7539eAffected 9bef72bdb26e291d6dffb04768741a0e49582666 to before 7cf280fbef5db6310e1b32074c8c34d1ba459796Affected 9bef72bdb26e291d6dffb04768741a0e49582666 to before 6c97817e20598e5473094e0e38d1f51f1cf4dfffAffected
LinuxLinux	3.18Affected before 3.18Not affected 5.10.273 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

9bef72bdb26e291d6dffb04768741a0e49582666 to before 20a0f80f67a1495a57e5a3ba0fa172a0f919691dAffected
9bef72bdb26e291d6dffb04768741a0e49582666 to before 039602d6ddb1febbb0561b30dab04461f78a1319Affected
9bef72bdb26e291d6dffb04768741a0e49582666 to before a5f405adb0229c9cf64eb3d695c333c92e3d3d4fAffected
9bef72bdb26e291d6dffb04768741a0e49582666 to before ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814Affected
9bef72bdb26e291d6dffb04768741a0e49582666 to before c069b3cfd753d6688ea0271c43553631ab38ce10Affected
9bef72bdb26e291d6dffb04768741a0e49582666 to before 7ef9ad82d95dd3c74570d80a689a0570fbc7539eAffected
9bef72bdb26e291d6dffb04768741a0e49582666 to before 7cf280fbef5db6310e1b32074c8c34d1ba459796Affected
9bef72bdb26e291d6dffb04768741a0e49582666 to before 6c97817e20598e5473094e0e38d1f51f1cf4dfffAffected

LinuxLinux

3.18Affected
before 3.18Not affected
5.10.273 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.