OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89980

HIGH · CVSS 8.4 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the ALSA subsystem in the Linux kernel, specifically within the snd_harmony_create() function, where locks are not initialized before an IRQ request. This can lead to potential race conditions if an interrupt occurs while the locks are uninitialized, potentially causing system instability or crashes. Linux distributions utilizing the ALSA harmony driver should prioritize applying the patch to mitigate this risk.

CVE
CVE-2026-89980
Severity
HIGH
CVSS
8.4
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the IRQ before initializing h->lock and h->mixer_lock. A pending interrupt can invoke the handler while these locks are uninitialized. Initialize both locks before requesting the IRQ so the handler always sees valid lock state.