Answer in brief
CVE-2026-46262 records a Unknown severity vulnerability in ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=612ffe1f4f0499b3011f16d06e354a76dae2e2d1 <ae5a70e3e87c28edbaf9939cfef1bcbd9615420f || >=38354c82abe7bcbcd1182a06af89d3cc16d3e2c7 <30ffcad5edb56947dccc26f6816ab7a55b21a711 || >=61e007657bf7740d54ca2aadce0fb5997839818e <29b2fbe3498da3681a01b34e4a2259f8a1b89448 || >=daaf4fe333e0d48b2037cd2270bf1ff8f70d5068 <b0f74f5d24fe3c73ef1369a811891198b54c1e8e || >=cab928242853a832ffa7efda270ecfb9efeebb6e <9a2a5da002775376498e8814df4a87cd629a3a0c || >=f514248727606b9087bc38a284ff686e0093abf1 <0886dc6326c3cc596799c4340d342898301cf52a || >=f514248727606b9087bc38a284ff686e0093abf1 <9f16d96e1222391a6b996a1b676bec14fb91e3b2 || >=5.15.201 <5.15.202 || >=6.1.164 <6.1.165 || >=6.6.127 <6.6.128 || >=6.12.74 <6.12.75 || >=6.18.13 <6.18.14 | ae5a70e3e87c28edbaf9939cfef1bcbd9615420f, 30ffcad5edb56947dccc26f6816ab7a55b21a711, 29b2fbe3498da3681a01b34e4a2259f8a1b89448, b0f74f5d24fe3c73ef1369a811891198b54c1e8e, 9a2a5da002775376498e8814df4a87cd629a3a0c, 0886dc6326c3cc596799c4340d342898301cf52a, 9f16d96e1222391a6b996a1b676bec14fb91e3b2, 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.14 |
| Linux/Linuxgeneric | 6.19 | Not reported |
Published upstream
Jun 3, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.
Quoted source text, attributed separately from HOL analysis.