CVE-2026-89980

CVE-2026-89980

High · published September 16, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: harmony: initialize locks before requesting IRQ

snd_harmony_create() registers the IRQ before initializing h->lock and

h->mixer_lock. A pending interrupt can invoke the handler while these

locks are uninitialized.

Initialize both locks before requesting the IRQ so the handler always

sees valid lock state.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00185 · 7.7th percentile
Published
2026-09-16T15:17Z
References (7)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:32Z
    ALSA: harmony: initialize locks before requesting IRQ
    cvelistv5