CVE-2026-46262

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46262", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.108Z", "datePublished": "2026-06-03T15:49:59.980Z", "dateUpdated": "2026-11-06T16:13:46.776Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-03T15:49:59.980Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()\n\nThis reverts commit f51424872760 (\"ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()\").\n\nThe original patch attempted to acquire the card->controls_rwsem lock in\nfsl_xcvr_mode_put(). However, this function is called from the upper ALSA\ncore function snd_ctl_elem_write(), which already holds the write lock on\ncontrols_rwsem for the whole put operation. So there is no need to simply\nhold the lock for fsl_xcvr_activate_ctl() again.\n\nAcquiring the read lock while holding the write lock in the same thread\nresults in a deadlock and a hung task, as reported by Alexander Stein."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/fsl/fsl_xcvr.c"], "versions": [{"version": "612ffe1f4f0499b3011f16d06e354a76dae2e2d1", "lessThan": "ae5a70e3e87c28edbaf9939cfef1bcbd9615420f", "status": "affected", "versionType": "git"}, {"version": "38354c82abe7bcbcd1182a06af89d3cc16d3e2c7", "lessThan": "30ffcad5edb56947dccc26f6816ab7a55b21a711", "status": "affected", "versionType": "git"}, {"version": "61e007657bf7740d54ca2aadce0fb5997839818e", "lessThan": "29b2fbe3498da3681a01b34e4a2259f8a1b89448", "status": "affected", "versionType": "git"}, {"version": "daaf4fe333e0d48b2037cd2270bf1ff8f70d5068", "lessThan": "b0f74f5d24fe3c73ef1369a811891198b54c1e8e", "status": "affected", "versionType": "git"}, {"version": "cab928242853a832ffa7efda270ecfb9efeebb6e", "lessThan": "9a2a5da002775376498e8814df4a87cd629a3a0c", "status": "affected", "versionType": "git"}, {"version": "f514248727606b9087bc38a284ff686e0093abf1", "lessThan": "0886dc6326c3cc596799c4340d342898301cf52a", "status": "affected", "versionType": "git"}, {"version": "f514248727606b9087bc38a284ff686e0093abf1", "lessThan": "9f16d96e1222391a6b996a1b676bec14fb91e3b2", "status": "affected", "versionType": "git"}, {"version": "5.15.201", "lessThan": "5.15.202", "status": "affected", "versionType": "semver"}, {"version": "6.1.164", "lessThan": "6.1.165", "status": "affected", "versionType": "semver"}, {"version": "6.6.127", "lessThan": "6.6.128", "status": "affected", "versionType": "semver"}, {"version": "6.12.74", "lessThan": "6.12.75", "status": "affected", "versionType": "semver"}, {"version": "6.18.13", "lessThan": "6.18.14", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/fsl/fsl_xcvr.c"], "versions": [{"version": "6.19", "status": "affected"}, {"version": "0", "lessThan": "6.19", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.202", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.165", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.14", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.4", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.201", "versionEndExcluding": "5.15.202"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.164", "versionEndExcluding": "6.1.165"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.127", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.74", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18.13", "versionEndExcluding": "6.18.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "6.19.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f"}, {"url": "https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711"}, {"url": "https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448"}, {"url": "https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e"}, {"url": "https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c"}, {"url": "https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a"}, {"url": "https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2"}], "title": "ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46262", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:13:08.973644Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:13:46.776Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46262", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:13:08.973644Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:13:10.406Z"}}], "cna": {"title": "ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "612ffe1f4f0499b3011f16d06e354a76dae2e2d1", "lessThan": "ae5a70e3e87c28edbaf9939cfef1bcbd9615420f", "versionType": "git"}, {"status": "affected", "version": "38354c82abe7bcbcd1182a06af89d3cc16d3e2c7", "lessThan": "30ffcad5edb56947dccc26f6816ab7a55b21a711", "versionType": "git"}, {"status": "affected", "version": "61e007657bf7740d54ca2aadce0fb5997839818e", "lessThan": "29b2fbe3498da3681a01b34e4a2259f8a1b89448", "versionType": "git"}, {"status": "affected", "version": "daaf4fe333e0d48b2037cd2270bf1ff8f70d5068", "lessThan": "b0f74f5d24fe3c73ef1369a811891198b54c1e8e", "versionType": "git"}, {"status": "affected", "version": "cab928242853a832ffa7efda270ecfb9efeebb6e", "lessThan": "9a2a5da002775376498e8814df4a87cd629a3a0c", "versionType": "git"}, {"status": "affected", "version": "f514248727606b9087bc38a284ff686e0093abf1", "lessThan": "0886dc6326c3cc596799c4340d342898301cf52a", "versionType": "git"}, {"status": "affected", "version": "f514248727606b9087bc38a284ff686e0093abf1", "lessThan": "9f16d96e1222391a6b996a1b676bec14fb91e3b2", "versionType": "git"}, {"status": "affected", "version": "5.15.201", "lessThan": "5.15.202", "versionType": "semver"}, {"status": "affected", "version": "6.1.164", "lessThan": "6.1.165", "versionType": "semver"}, {"status": "affected", "version": "6.6.127", "lessThan": "6.6.128", "versionType": "semver"}, {"status": "affected", "version": "6.12.74", "lessThan": "6.12.75", "versionType": "semver"}, {"status": "affected", "version": "6.18.13", "lessThan": "6.18.14", "versionType": "semver"}], "programFiles": ["sound/soc/fsl/fsl_xcvr.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.19"}, {"status": "unaffected", "version": "0", "lessThan": "6.19", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.14", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.4", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/soc/fsl/fsl_xcvr.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f"}, {"url": "https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711"}, {"url": "https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448"}, {"url": "https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e"}, {"url": "https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c"}, {"url": "https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a"}, {"url": "https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()\n\nThis reverts commit f51424872760 (\"ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()\").\n\nThe original patch attempted to acquire the card->controls_rwsem lock in\nfsl_xcvr_mode_put(). However, this function is called from the upper ALSA\ncore function snd_ctl_elem_write(), which already holds the write lock on\ncontrols_rwsem for the whole put operation. So there is no need to simply\nhold the lock for fsl_xcvr_activate_ctl() again.\n\nAcquiring the read lock while holding the write lock in the same thread\nresults in a deadlock and a hung task, as reported by Alexander Stein."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.15.201"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.165", "versionStartIncluding": "6.1.164"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.6.127"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.12.74"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.14", "versionStartIncluding": "6.18.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.4", "versionStartIncluding": "6.19"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-03T15:49:59.980Z"}}}, "cveMetadata": {"cveId": "CVE-2026-46262", "state": "PUBLISHED", "dateUpdated": "2026-11-06T16:13:46.776Z", "dateReserved": "2026-05-13T15:03:33.108Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-06-03T15:49:59.980Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/fsl/fsl_xcvr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "ae5a70e3e87c28edbaf9939cfef1bcbd9615420f", "status": "affected", "version": "612ffe1f4f0499b3011f16d06e354a76dae2e2d1", "versionType": "git"}, {"lessThan": "30ffcad5edb56947dccc26f6816ab7a55b21a711", "status": "affected", "version": "38354c82abe7bcbcd1182a06af89d3cc16d3e2c7", "versionType": "git"}, {"lessThan": "29b2fbe3498da3681a01b34e4a2259f8a1b89448", "status": "affected", "version": "61e007657bf7740d54ca2aadce0fb5997839818e", "versionType": "git"}, {"lessThan": "b0f74f5d24fe3c73ef1369a811891198b54c1e8e", "status": "affected", "version": "daaf4fe333e0d48b2037cd2270bf1ff8f70d5068", "versionType": "git"}, {"lessThan": "9a2a5da002775376498e8814df4a87cd629a3a0c", "status": "affected", "version": "cab928242853a832ffa7efda270ecfb9efeebb6e", "versionType": "git"}, {"lessThan": "0886dc6326c3cc596799c4340d342898301cf52a", "status": "affected", "version": "f514248727606b9087bc38a284ff686e0093abf1", "versionType": "git"}, {"lessThan": "9f16d96e1222391a6b996a1b676bec14fb91e3b2", "status": "affected", "version": "f514248727606b9087bc38a284ff686e0093abf1", "versionType": "git"}, {"lessThan": "5.15.202", "status": "affected", "version": "5.15.201", "versionType": "semver"}, {"lessThan": "6.1.165", "status": "affected", "version": "6.1.164", "versionType": "semver"}, {"lessThan": "6.6.128", "status": "affected", "version": "6.6.127", "versionType": "semver"}, {"lessThan": "6.12.75", "status": "affected", "version": "6.12.74", "versionType": "semver"}, {"lessThan": "6.18.14", "status": "affected", "version": "6.18.13", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/fsl/fsl_xcvr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.19"}, {"lessThan": "6.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.202", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.165", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.128", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.75", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.14", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "411B9362-5B74-4569-8450-50CAD50DE99C", "versionEndExcluding": "6.19.4", "versionStartIncluding": "6.19.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.15.201:*:*:*:*:*:*:*", "matchCriteriaId": "3873509D-CFDC-4039-9A16-64648274E54D", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.1.164:*:*:*:*:*:*:*", "matchCriteriaId": "8841C0DA-359F-4C10-8F51-9494CC682F61", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.6.127:*:*:*:*:*:*:*", "matchCriteriaId": "6F686B00-599C-4C3E-B874-A3725ADF8B50", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.12.74:*:*:*:*:*:*:*", "matchCriteriaId": "6E601D5F-7735-4B9F-B177-8317F642EC01", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.18.13:*:*:*:*:*:*:*", "matchCriteriaId": "7FBB74D9-EA97-4AD2-B9D8-DC505C2E45DE", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*", "matchCriteriaId": "35C8A871-4971-433E-A046-FC9F7B7D190A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()\n\nThis reverts commit f51424872760 (\"ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()\").\n\nThe original patch attempted to acquire the card->controls_rwsem lock in\nfsl_xcvr_mode_put(). However, this function is called from the upper ALSA\ncore function snd_ctl_elem_write(), which already holds the write lock on\ncontrols_rwsem for the whole put operation. So there is no need to simply\nhold the lock for fsl_xcvr_activate_ctl() again.\n\nAcquiring the read lock while holding the write lock in the same thread\nresults in a deadlock and a hung task, as reported by Alexander Stein."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nASoC: fsl_xcvr: Revertir correcci\u00f3n de bloqueo faltante en fsl_xcvr_mode_put()\n\nEsto revierte el commit f51424872760 ('ASoC: fsl_xcvr: corregir bloqueo faltante en fsl_xcvr_mode_put()').\n\nEl parche original intent\u00f3 adquirir el bloqueo card->controls_rwsem en fsl_xcvr_mode_put(). Sin embargo, esta funci\u00f3n es llamada desde la funci\u00f3n central superior de ALSA snd_ctl_elem_write(), que ya mantiene el bloqueo de escritura en controls_rwsem para toda la operaci\u00f3n 'put'. As\u00ed que no hay necesidad de simplemente mantener el bloqueo para fsl_xcvr_activate_ctl() de nuevo.\n\nAdquirir el bloqueo de lectura mientras se mantiene el bloqueo de escritura en el mismo hilo resulta en un interbloqueo y una tarea colgada, seg\u00fan lo informado por Alexander Stein."}], "id": "CVE-2026-46262", "lastModified": "2026-11-06T17:17:53.887", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46262", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T16:13:08.973644Z", "version": "2.0.3"}}]}, "published": "2026-06-03T18:16:27.513", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0886dc6326c3cc596799c4340d342898301cf52a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-667"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()", "id": "2484450", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484450"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-833", "details": ["A flaw was found in the Linux kernel's audio subsystem, specifically in the fsl_xcvr module. This vulnerability allows a local user to trigger a deadlock condition within the system. By attempting to acquire a read lock while already holding a write lock in the same process, the system can become unresponsive. This issue ultimately leads to a Denial of Service (DoS), where the system hangs and becomes unusable."], "name": "CVE-2026-46262", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-06-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46262\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46262\nhttps://lore.kernel.org/linux-cve-announce/2026060337-CVE-2026-46262-cdb5@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[612ffe1f4f0499b3011f16d06e354a76dae2e2d1,ae5a70e3e87c28edbaf9939cfef1bcbd9615420f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[38354c82abe7bcbcd1182a06af89d3cc16d3e2c7,30ffcad5edb56947dccc26f6816ab7a55b21a711)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[61e007657bf7740d54ca2aadce0fb5997839818e,29b2fbe3498da3681a01b34e4a2259f8a1b89448)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[daaf4fe333e0d48b2037cd2270bf1ff8f70d5068,b0f74f5d24fe3c73ef1369a811891198b54c1e8e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cab928242853a832ffa7efda270ecfb9efeebb6e,9a2a5da002775376498e8814df4a87cd629a3a0c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f514248727606b9087bc38a284ff686e0093abf1,0886dc6326c3cc596799c4340d342898301cf52a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f514248727606b9087bc38a284ff686e0093abf1,9f16d96e1222391a6b996a1b676bec14fb91e3b2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.15.201,5.15.202)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.1.164,6.1.165)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.127,6.6.128)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.74,6.12.75)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.18.13,6.18.14)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[5.15.202,5.15.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.1.165,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.128,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.75,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.14,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19.4,6.19.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-06-03T18:45:40.186935+00:00", "updated": "2026-06-09T23:15:16.728384+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}