CVE-2026-46262

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-06-03 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.

Weakness Classification (1)

Affected Software (20)

VendorProductVersion
Linux Linux 612ffe1f4f0499b3011f16d06e354a76dae2e2d1 < ae5a70e3e87c28edbaf9939cfef1bcbd9615420f
Linux Linux 38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 < 30ffcad5edb56947dccc26f6816ab7a55b21a711
Linux Linux 61e007657bf7740d54ca2aadce0fb5997839818e < 29b2fbe3498da3681a01b34e4a2259f8a1b89448
Linux Linux daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 < b0f74f5d24fe3c73ef1369a811891198b54c1e8e
Linux Linux cab928242853a832ffa7efda270ecfb9efeebb6e < 9a2a5da002775376498e8814df4a87cd629a3a0c
Linux Linux f514248727606b9087bc38a284ff686e0093abf1 < 0886dc6326c3cc596799c4340d342898301cf52a
Linux Linux f514248727606b9087bc38a284ff686e0093abf1 < 9f16d96e1222391a6b996a1b676bec14fb91e3b2
Linux Linux 5.15.201 < 5.15.202
Linux Linux 6.1.164 < 6.1.165
Linux Linux 6.6.127 < 6.6.128
Linux Linux 6.12.74 < 6.12.75
Linux Linux 6.18.13 < 6.18.14
Linux Linux 6.19
linux linux_kernel 6.19.1 – 6.19.4
linux linux_kernel 5.15.201
linux linux_kernel 6.1.164
linux linux_kernel 6.6.127
linux linux_kernel 6.12.74
linux linux_kernel 6.18.13
linux linux_kernel 6.19

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.09%
Raw Score 0.000910
Percentile 0.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00091
2026-11-12
0.00091
2026-11-10
0.00091
2026-11-09
0.00091
2026-11-08
0.00091
2026-11-07
0.00091
2026-11-06
0.00091

Intelligence Sources

mitre ref →
nvd ref →