What’s Vulnerable › Vulnerabilities

CVE-2026-97909: ASoC: sti: initialize IRQ lock before requesting IRQ

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: initialize IRQ lock before requesting IRQ uni_reader_init() registers the shared IRQ before initializing reader->irq_lock. A pending interrupt can invoke the handler while the lock is still uninitialized. Initialize the lock before registering the IRQ so the interrupt path always sees valid lock state.

Affected products

• Linux kernel: 4.11 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3
• https://git.kernel.org/stable/c/181bb64a1333bbf3c369123d05614536f3ae7b7c
• https://git.kernel.org/stable/c/3a9552d18fc8174bab015bc941ede19452b184b3
• https://git.kernel.org/stable/c/45021eb56211431f0ef44001b7d12cce32d49261
• https://git.kernel.org/stable/c/9128265f0fc8031a71775d70786052e5631aac54
• https://git.kernel.org/stable/c/998ca92f69bc43499705016d02ffaf0663126d57
• https://git.kernel.org/stable/c/a42dd4dae4c9191caa017cf54cc40b6bb125be65
• https://git.kernel.org/stable/c/f1e7b74512164314d0550ec5b62e3d40b95b0986

Get alerted when CVE-2026-97909 or the next vulnerability affects your stack