{"id":24633,"date":"2026-09-16T20:32:34","date_gmt":"2026-09-16T12:32:34","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89946"},"modified":"2026-09-16T20:32:34","modified_gmt":"2026-09-16T12:32:34","slug":"cve-2026-89946","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89946","title":{"rendered":"CVE-2026-89946 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: cs35l33: drain"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ASoC: cs35l33: drain threaded IRQ before runtime suspend<\/p>\n<p>cs35l33_runtime_suspend() currently switches the codec into<br \/>\nregcache_cache_only(true) and powers it down without first quiescing the<br \/>\nthreaded IRQ registered by devm_request_threaded_irq(). That leaves a<br \/>\nwindow where cs35l33_irq_thread() can still run after suspend has closed<br \/>\noff live register access.<\/p>\n<p>A running system can reach this during runtime PM while the driver still<br \/>\nhas critical fault IRQs unmasked. If the threaded handler runs in that<br \/>\nwindow, it reads volatile INT_STATUS_1\/2 after cache_only has been<br \/>\nenabled, ignores the regmap_read() failures, and can still drive the<br \/>\nAMP_SHORT_RLS, CAL_ERR_RLS, OTE_RLS, and OTW_RLS release paths.<\/p>\n<p>Use disable_irq() before entering cache_only\/power-off so any in-flight<br \/>\nthreaded handler is drained and no new IRQ thread can run during the<br \/>\nsuspended state. Re-enable the IRQ only after runtime_resume() has<br \/>\nrestored live register access with regcache_sync(). Since probe only<br \/>\nwarns if devm_request_threaded_irq() fails, track whether the IRQ was<br \/>\nactually installed before disabling or re-enabling it.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ASoC: cs35l33: drain threaded IRQ before runtime suspend<\/p>\n<p>cs35l33_runtime_suspend() currently switches the codec into<br \/>\nregcache_cach<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-24633","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/24633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}