VDB

CVE-2026-80967

CVE-2026-80967 PUBLISHED CVSS 8.4 HIGH

Reported by Linux · Published September 11, 2026

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex. Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe.

EPSS 0.18% · 8.1th percentile

Risk Scores

CVSS 3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.18%
8.1th percentile

Affected Products

VendorProductVersions
LinuxLinux9bef72bdb26e291d6dffb04768741a0e49582666, 9bef72bdb26e291d6dffb04768741a0e49582666, 9bef72bdb26e291d6dffb04768741a0e49582666
LinuxLinux3.18, 0, 5.15.221
linuxlinux_kernel3.18, 3.18, 3.18
LinuxLinux9bef72bdb26e291d6dffb04768741a0e49582666, 9bef72bdb26e291d6dffb04768741a0e49582666, 9bef72bdb26e291d6dffb04768741a0e49582666

Timeline

  • Sep 11, 2026 CVE Published
  • Sep 12, 2026 EPSS Score
  • Sep 12, 2026 Coalition ESS Score
  • Sep 13, 2026 EPSS Score
  • Sep 14, 2026 CVE Updated
  • Sep 16, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›