In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/cs35l41: Fix firmware load work teardown
cs35l41_hda creates ALSA controls whose private data points at the cs35l41_hda object. The firmware load control can also queue fw_load_work.
Those controls are not removed on component unbind, and device remove only cancels fw_load_work through cs35l41_remove_dsp(). That helper is skipped when halo_initialized is false. With firmware_autostart disabled, a firmware load can be requested before the DSP has been initialized. If the component or device is removed before the queued work runs, the worker can run after teardown and dereference driver state that is no longer valid.
Track the created controls and remove them on unbind so no new control callback can reach the driver data or queue more work. Then cancel fw_load_work to drain any request that was already queued. Also cancel the work unconditionally during device remove before runtime PM teardown.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 2, 2026 | Aug 2, 2026 |
| Redhat_linux | — | No solution exists | Aug 10, 2026 | Jul 25, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1013-oemUpgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-oem-26.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-realtime-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-realtime-64kUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-26.04bUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-generic-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-gke-hwe-26.04 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 14, 2026 | Jul 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub