Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-46262

25
FAUCET Score

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()"). The original patch attempted to acquire the card->controls_rwsem lock in fsl_xcvr_mode_put(). However, this function is called from the upper ALSA core function snd_ctl_elem_write(), which already holds the write lock on controls_rwsem for the whole put operation. So there is no need to simply hold the lock for fsl_xcvr_activate_ctl() again. Acquiring the read lock while holding the write lock in the same thread results in a deadlock and a hung task, as reported by Alexander Stein.

First published: Jun 3, 2026Last modified: Jun 3, 2026

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.15.201, < 5.15.202CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.1.164, < 6.1.165CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.12.74, < 6.12.75CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.18.13, < 6.18.14CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.6.127, < 6.6.128CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.09%
Probability of exploitation in next 30 days
EPSS Percentile
0.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0009 is in the 4th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

git.kernel.org / stable/c/0886dc6326c3cc596799c4340d342898301cf52a
Patch
git.kernel.org / stable/c/29b2fbe3498da3681a01b34e4a2259f8a1b89448
Patch
git.kernel.org / stable/c/30ffcad5edb56947dccc26f6816ab7a55b21a711
Patch
git.kernel.org / stable/c/9a2a5da002775376498e8814df4a87cd629a3a0c
Patch
git.kernel.org / stable/c/9f16d96e1222391a6b996a1b676bec14fb91e3b2
Patch
git.kernel.org / stable/c/ae5a70e3e87c28edbaf9939cfef1bcbd9615420f
Patch
git.kernel.org / stable/c/b0f74f5d24fe3c73ef1369a811891198b54c1e8e
Patch