{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97909", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:18:58.201Z", "datePublished": "2026-09-25T10:22:33.435Z", "dateUpdated": "2026-09-25T10:22:33.435Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-25T10:22:33.435Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: sti: initialize IRQ lock before requesting IRQ\n\nuni_reader_init() registers the shared IRQ before initializing\nreader->irq_lock. A pending interrupt can invoke the handler while the\nlock is still uninitialized.\n\nInitialize the lock before registering the IRQ so the interrupt path\nalways sees valid lock state."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/sti/uniperif_reader.c"], "versions": [{"version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "lessThan": "f1e7b74512164314d0550ec5b62e3d40b95b0986", "status": "affected", "versionType": "git"}, {"version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "lessThan": "998ca92f69bc43499705016d02ffaf0663126d57", "status": "affected", "versionType": "git"}, {"version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "lessThan": "a42dd4dae4c9191caa017cf54cc40b6bb125be65", "status": "affected", "versionType": "git"}, {"version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "lessThan": "04405aeef4f8d7bcac6dcb1947acafdb4420c2c3", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/sti/uniperif_reader.c"], "versions": [{"version": "4.11", "status": "affected"}, {"version": "0", "lessThan": "4.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "7.3-rc3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f1e7b74512164314d0550ec5b62e3d40b95b0986"}, {"url": "https://git.kernel.org/stable/c/998ca92f69bc43499705016d02ffaf0663126d57"}, {"url": "https://git.kernel.org/stable/c/a42dd4dae4c9191caa017cf54cc40b6bb125be65"}, {"url": "https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3"}], "title": "ASoC: sti: initialize IRQ lock before requesting IRQ", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/sti/uniperif_reader.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f1e7b74512164314d0550ec5b62e3d40b95b0986", "status": "affected", "version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "versionType": "git"}, {"lessThan": "998ca92f69bc43499705016d02ffaf0663126d57", "status": "affected", "version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "versionType": "git"}, {"lessThan": "a42dd4dae4c9191caa017cf54cc40b6bb125be65", "status": "affected", "version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "versionType": "git"}, {"lessThan": "04405aeef4f8d7bcac6dcb1947acafdb4420c2c3", "status": "affected", "version": "d05d862ead8eca5e7d4ccf82d39d9189579ee5b1", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/sti/uniperif_reader.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.11"}, {"lessThan": "4.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: sti: initialize IRQ lock before requesting IRQ\n\nuni_reader_init() registers the shared IRQ before initializing\nreader->irq_lock. A pending interrupt can invoke the handler while the\nlock is still uninitialized.\n\nInitialize the lock before registering the IRQ so the interrupt path\nalways sees valid lock state."}], "id": "CVE-2026-97909", "lastModified": "2026-09-25T11:17:17.847", "metrics": {}, "published": "2026-09-25T11:17:17.847", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/998ca92f69bc43499705016d02ffaf0663126d57"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a42dd4dae4c9191caa017cf54cc40b6bb125be65"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f1e7b74512164314d0550ec5b62e3d40b95b0986"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ASoC: sti: initialize IRQ lock before requesting IRQ", "id": "2541035", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541035"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-908", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nASoC: sti: initialize IRQ lock before requesting IRQ\nuni_reader_init() registers the shared IRQ before initializing\nreader->irq_lock. A pending interrupt can invoke the handler while the\nlock is still uninitialized.\nInitialize the lock before registering the IRQ so the interrupt path\nalways sees valid lock state.", "A flaw was found in the Linux kernel's audio subsystem. The STI audio driver registers a shared interrupt request (IRQ) before initializing its internal locking mechanism. A local attacker capable of triggering driver initialization may cause an interrupt to be handled while the lock remains uninitialized. This issue can crash the kernel, resulting in a denial of service (DoS)."], "name": "CVE-2026-97909", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97909\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97909\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97909.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d05d862ead8eca5e7d4ccf82d39d9189579ee5b1,f1e7b74512164314d0550ec5b62e3d40b95b0986)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d05d862ead8eca5e7d4ccf82d39d9189579ee5b1,998ca92f69bc43499705016d02ffaf0663126d57)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d05d862ead8eca5e7d4ccf82d39d9189579ee5b1,a42dd4dae4c9191caa017cf54cc40b6bb125be65)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d05d862ead8eca5e7d4ccf82d39d9189579ee5b1,04405aeef4f8d7bcac6dcb1947acafdb4420c2c3)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T14:30:14.460107+00:00", "updated": "2026-10-01T09:00:05.480723+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}