From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C9D84332918 for ; Wed, 3 Jun 2026 15:51:17 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780501878; cv=none; b=LiSIsCJYTC1FgY7feG6a9k7wyozRvZ/F8lSR8mJj7rv0AIdsMR4+ae320YDFKpZ/BN3W3ex2hik/Wm/IyjlfIUYFtKe4/NFMS1hU/1w687e84u/qGwKvEYJmwo3kIBdxHH9SAKyP8wJ14aPMlBUTwlcFh3Bn6WYL5QeqcYBXZ9M= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780501878; c=relaxed/simple; bh=JQlTZwb8+f/P/3y3DNfViE7HDIAbR/J5F8AWrCYYMhg=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=EFlBixux7ZCjFvEXnDqb6eEBR0qPchGgJT0eIuwp8f58YCyqeHHWhkYLS/jBs49o92bFdE8mcynk+Ju4nr9h4pN7ZIMm7K3mdJFR+wEVUbVplnXW5oKXu+5QWLZj+Gn3lMjAt8yYb2LZOuo2QLwjXRROzgH3+78uxjc/zo/KvwM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=A/QGkSbb; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="A/QGkSbb" Received: by smtp.kernel.org (Postfix) with ESMTPSA id E40AF1F00893; Wed, 3 Jun 2026 15:51:16 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1780501877; bh=7tilIv+aPvzBMGfMQnYOdEFN85CSFYZwL+IbGYlKFkA=; h=From:To:Cc:Subject:Date:Reply-To; b=A/QGkSbbcERyLS/pDkvKJXgDsPv7lAQHY6nBGjKLW22unDkwbbGEJx3YsLUZfbGKj dOGcCAAlKphfl4b4BJrzIE1XMkHlLOPWfth9c1RMmKZOj8X5uY2xP2cdtoGR0BkmSb B21A86gnDxUjmM8B4eqG1BR9TmmQdEF8PPFhweSE= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2026-46262: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() Date: Wed, 3 Jun 2026 17:49:51 +0200 Message-ID: <2026060337-CVE-2026-46262-cdb5@gregkh> X-Mailer: git-send-email 2.54.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=3522; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=Ra1OB76Noxnir+6ze3T0xWfznooBrIYDRkmyG73pVjA=; b=owGbwMvMwCRo6H6F97bub03G02pJDFkKvoJeMicTqxzmXLw/+XtqnkngLJ43mZs3Tdo1Ky1pr rHambrjHbEsDIJMDLJiiixftvEc3V9xSNHL0PY0zBxWJpAhDFycAjCRIzkMCw6vUta4z75YgLFl Puu0tJuiDDnrfzLM4T3dosh8gzNMUVkv4wKrYK2CyG1nAA== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein. The Linux kernel CVE team has assigned CVE-2026-46262 to this issue. Affected and fixed versions =========================== Issue introduced in 5.15.201 with commit 612ffe1f4f0499b3011f16d06e354a76dae2e2d1 and fixed in 5.15.202 with commit ae5a70e3e87c28edbaf9939cfef1bcbd9615420f Issue introduced in 6.1.164 with commit 38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 and fixed in 6.1.165 with commit 30ffcad5edb56947dccc26f6816ab7a55b21a711 Issue introduced in 6.6.127 with commit 61e007657bf7740d54ca2aadce0fb5997839818e and fixed in 6.6.128 with commit 29b2fbe3498da3681a01b34e4a2259f8a1b89448 Issue introduced in 6.12.74 with commit daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 and fixed in 6.12.75 with commit b0f74f5d24fe3c73ef1369a811891198b54c1e8e Issue introduced in 6.18.13 with commit cab928242853a832ffa7efda270ecfb9efeebb6e and fixed in 6.18.14 with commit 9a2a5da002775376498e8814df4a87cd629a3a0c Issue introduced in 6.19 with commit f514248727606b9087bc38a284ff686e0093abf1 and fixed in 6.19.4 with commit 0886dc6326c3cc596799c4340d342898301cf52a Issue introduced in 6.19 with commit f514248727606b9087bc38a284ff686e0093abf1 and fixed in 7.0 with commit 9f16d96e1222391a6b996a1b676bec14fb91e3b2 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-46262 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: sound/soc/fsl/fsl_xcvr.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711 https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448 https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2