CVE-2026-46262
Description
A flaw was found in the Linux kernel's audio subsystem, specifically in the fsl_xcvr module. This vulnerability allows a local user to trigger a deadlock condition within the system. By attempting to acquire a read lock while already holding a write lock in the same process, the system can become unresponsive. This issue ultimately leads to a Denial of Service (DoS), where the system hangs and becomes unusable.
Statement
This vulnerability is rated as Low severity because exploitation requires local access and relies on hardware-specific audio transceiver controllers rarely deployed in enterprise environments. The underlying issue resides within an ALSA SoC driver intended for embedded NXP/Freescale platforms, which is not active on standard installations unless corresponding hardware is present. Additionally, triggering the flaw requires direct interaction with sound card control interfaces, which are typically restricted to privileged users or local desktop sessions, preventing unauthenticated remote abuse.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | 5.5 | N/A |
| Attack Vector | Local | Local | N/A |
| Attack Complexity | Low | Low | N/A |
| Privileges Required | Low | Low | N/A |
| User Interaction | None | None | N/A |
| Scope | Unchanged | Unchanged | N/A |
| Confidentiality | None | None | N/A |
| Integrity Impact | None | None | N/A |
| Availability Impact | High | High | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
