CVE-2026-45963

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: nau8821: Cancel delayed work on component remove

Attempting to unload the driver while a jack detection work is pending would likely crash the kernel when it is eventually scheduled for execution:

[ 1984.896308] BUG: unable to handle page fault for address: ffffffffc10c2a20 […] [ 1984.896388] Hardware name: Valve Jupiter/Jupiter, BIOS F7A0131 01/30/2024 [ 1984.896396] Workqueue: events nau8821_jdet_work [snd_soc_nau8821] [ 1984.896414] RIP: 0010:__mutex_lock+0x9f/0x11d0 […] [ 1984.896504] Call Trace: [ 1984.896511] <TASK> [ 1984.896524] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core] [ 1984.896572] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core] [ 1984.896596] snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core] [ 1984.896622] nau8821_jdet_work+0xeb/0x1e0 [snd_soc_nau8821] [ 1984.896636] process_one_work+0x211/0x590 [ 1984.896649] ? srso_return_thunk+0x5/0x5f [ 1984.896670] worker_thread+0x1cd/0x3a0

Cancel unscheduled jdet_work or wait for its execution to finish before the component driver gets removed.

Affected Software

Weaknesses

References

• https://git.kernel.org/stable/c/cd6b991de3e0b68560fe98dc739672747d2e4204
• https://git.kernel.org/stable/c/36fb28fa033f6544d81f1cc056b27d0c0bf26d4f
• https://git.kernel.org/stable/c/9210ae708ddead67f55610342ea03fe9d4de6005
• https://git.kernel.org/stable/c/13d20517bee1c9b69c7750026c61e7ec021080a4
• https://git.kernel.org/stable/c/3955767ec39dcc0358470ffe6535703e2b7fd815
• https://git.kernel.org/stable/c/dbd3fd05cddfdeec1e49b0a66269881c09eebd17

• ←Previous
• Next→