{"id":24632,"date":"2026-09-16T20:32:34","date_gmt":"2026-09-16T12:32:34","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89945"},"modified":"2026-09-16T20:32:34","modified_gmt":"2026-09-16T12:32:34","slug":"cve-2026-89945","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89945","title":{"rendered":"CVE-2026-89945 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: cs35l34: drain"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ASoC: cs35l34: drain threaded IRQ before runtime suspend<\/p>\n<p>cs35l34_runtime_suspend() currently switches the codec into<br \/>\nregcache_cache_only(true), asserts reset low, and powers the device off<br \/>\nwithout first quiescing the threaded IRQ registered by<br \/>\ndevm_request_threaded_irq(). That leaves a window where<br \/>\ncs35l34_irq_thread() can still run after suspend has removed live<br \/>\nhardware access.<\/p>\n<p>A running system can reach this during runtime PM while the driver still<br \/>\nhas critical fault IRQs unmasked. If the threaded handler runs in that<br \/>\nwindow, it reads volatile INT_STATUS_1..4 after cache_only has been<br \/>\nenabled, ignores the regmap_read() failures, and can still execute the<br \/>\nPROT_RELEASE_CTL release sequence or the BST fault power-down writes.<\/p>\n<p>Use disable_irq() before entering cache_only\/reset-low\/power-off so any<br \/>\nin-flight threaded handler is drained and no new IRQ thread can run<br \/>\nwhile the device is suspended. Re-enable the IRQ only after<br \/>\nruntime_resume() has restored live register access with regcache_sync().<br \/>\nSince probe only logs request_threaded_irq() failures and keeps going,<br \/>\ntrack whether the IRQ was actually installed before disabling or<br \/>\nre-enabling it.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ASoC: cs35l34: drain threaded IRQ before runtime suspend<\/p>\n<p>cs35l34_runtime_suspend() currently switches the codec into<br \/>\nregcache_cach<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-24632","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/24632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}