CVE-2026-45963CWE-476

CVE-2026-45963

Medium · published May 27, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: nau8821: Cancel delayed work on component remove

Attempting to unload the driver while a jack detection work is pending

would likely crash the kernel when it is eventually scheduled for

execution:

[ 1984.896308] BUG: unable to handle page fault for address: ffffffffc10c2a20

[...]

[ 1984.896388] Hardware name: Valve Jupiter/Jupiter, BIOS F7A0131 01/30/2024

[ 1984.896396] Workqueue: events nau8821_jdet_work [snd_soc_nau8821]

[ 1984.896414] RIP: 0010:__mutex_lock+0x9f/0x11d0

[...]

[ 1984.896504] Call Trace:

[ 1984.896511] <TASK>

[ 1984.896524] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core]

[ 1984.896572] ? snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core]

[ 1984.896596] snd_soc_dapm_disable_pin+0x26/0x60 [snd_soc_core]

[ 1984.896622] nau8821_jdet_work+0xeb/0x1e0 [snd_soc_nau8821]

[ 1984.896636] process_one_work+0x211/0x590

[ 1984.896649] ? srso_return_thunk+0x5/0x5f

[ 1984.896670] worker_thread+0x1cd/0x3a0

Cancel unscheduled jdet_work or wait for its execution to finish before

the component driver gets removed.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-05-27T18:17Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 6.19.46.19.4
References (6)
EPSS history
Timeline
  • 27 MAY 12:18Z
    ASoC: nau8821: Cancel delayed work on component remove
    cvelistv5