SB20260928305 - Use of uninitialized resource in Linux kernel soc sti

Description

This security bulletin contains information about 1 vulnerability.

1) Use of uninitialized resource (CVE-ID: CVE-2026-97909)

CWE-ID: CWE-908 - Use of Uninitialized Resource

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to trigger use of an uninitialized IRQ lock.

The vulnerability exists due to improper initialization in the ASoC STI UniPerif reader initialization routine when a pending shared interrupt is handled before the IRQ lock is initialized. A local user can cause the shared interrupt handler to run during initialization to trigger use of an uninitialized IRQ lock.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3
• https://git.kernel.org/stable/c/998ca92f69bc43499705016d02ffaf0663126d57
• https://git.kernel.org/stable/c/a42dd4dae4c9191caa017cf54cc40b6bb125be65
• https://git.kernel.org/stable/c/f1e7b74512164314d0550ec5b62e3d40b95b0986