Deadlock Vulnerability in Linux Kernel's ASoC fsl_xcvr Control Interface

CVE-2026-46262

What is CVE-2026-46262?

A deadlock vulnerability exists in the Linux kernel's ASoC fsl_xcvr control interface. The issue arises from a regression that improperly handles locking mechanisms in the fsl_xcvr_mode_put() function. The function attempts to acquire a lock that is already held by the calling function, snd_ctl_elem_write(), which can result in a situation where the system hangs due to competing lock states. This flaw was identified and reported by Alexander Stein, highlighting the importance of proper lock management in concurrent programming.

References