ASoC: nau8821: Cancel delayed work on component remove (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.13 % · centile 3 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: nau8821: Cancel delayed work on component remove Attempting to unload the driver while a jack detection work is pending would likely crash the kernel when it is eventually scheduled for execution: [ 1984.896308] BUG: unable to handle page fault for address: ffffffffc10c2a20 [...] [ 1984.896388] Hardware name: Valve Jupiter/Jupiter, BIOS F7A0131 01/30/2024 [ 1984.896396] Workqueue: events nau8821_jdet_work [snd_soc_nau8821] [ 1984.896414] RIP: 0010:__mutex_lock+0x9f/0x11d0 [...] [ 1984.896504] Call Trace: [ 1984.896511] <TASK> [ 1984.896524] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core] [ 1984.896572] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core] [ 1984.896596] snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core] [ 1984.896622] nau8821_jdet_work+0xeb/0x1e0 [snd_soc_nau8821] [ 1984.896636] process_one_work+0x211/0x590 [ 1984.896649] ? srso_return_thunk+0x5/0x5f [ 1984.896670] worker_thread+0x1cd/0x3a0 Cancel unscheduled jdet_work or wait for its execution to finish before the component driver gets removed.
Faiblesses (CWE)
- CWE-476 — Déréférencement de pointeur nul
Références
- https://git.kernel.org/stable/c/cd6b991de3e0b68560fe98dc739672747d2e4204
- https://git.kernel.org/stable/c/36fb28fa033f6544d81f1cc056b27d0c0bf26d4f
- https://git.kernel.org/stable/c/9210ae708ddead67f55610342ea03fe9d4de6005
- https://git.kernel.org/stable/c/13d20517bee1c9b69c7750026c61e7ec021080a4
- https://git.kernel.org/stable/c/3955767ec39dcc0358470ffe6535703e2b7fd815
- https://git.kernel.org/stable/c/dbd3fd05cddfdeec1e49b0a66269881c09eebd17
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2026-32247
- GCVE · GCVE-0-2026-45963
Avis du CERT-FR
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1064 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0927 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 6.19.4
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected aab1ad11d69fa7f35cb88105614ea7911598e1d6 < cd6b991de3e0b68560fe98dc739672747d2e4204 ; affected aab1ad11d69fa7f35cb88105614ea7911598e1d6 < 36fb28fa033f6544d81f1cc056b27d0c0bf26d4f ; affected aab1ad11d69fa7f35cb88105614ea7911598e1d6 < 9210ae708ddead67f55610342ea03fe9d4de6005 ; affected aab1ad11d69fa7f35cb88105614ea7911598e1d6 < 13d20517bee1c9b69c7750026c61e7ec021080a4 ; affected aab1ad11d69fa7f35cb88105614ea7911598e1d6 < 3955767ec39dcc0358470ffe6535703e2b7fd815 ; affected aab1ad11d69fa7f35cb88105614ea7911598e1d6 < dbd3fd05cddfdeec1e49b0a66269881c09eebd17 |
| Linux · Linux | affected 5.16 ; unaffected 0 < 5.16 ; unaffected 6.1.187 ≤ 6.1.* ; unaffected 6.6.156 ≤ 6.6.* ; unaffected 6.12.108 ≤ 6.12.* ; unaffected 6.18.49 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |