CVE-2026-45963: ASoC: nau8821: Cancel delayed work on component remove
ASoC: nau8821: Cancel delayed work on component remove
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the ASoC nau8821 driver, ensure that during component driver remove/unload you cancel any pending jack detection work (cancel/unschedule nau8821_jdet_work or wait for it to complete) so that snd_soc_dapm_disable_pin is not called after the driver/core resources have been removed.
Linux kernel (ASoC nau8821 driver) Cancel pending jack detection delayed work on component remove = Cancel/flush nau8821_jdet_work (unschedule jdet_work) before unloading the driver
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel's snd_soc_nau8821 ASoC driver are exposed when the driver can be unloaded while its jack-detection delayed work is pending. The supplied crash report identifies Valve Jupiter hardware, but the data does not limit the issue to that platform.
What must happen for exploitation or failure to occur?
A local user with low privileges must trigger or cause removal/unloading of the NAU8821 component driver while jack-detection work is pending. When the queued work later executes after component removal, it can crash the kernel.
Is this a remote attack vector?
No. The CVSS vector specifies local access, low attack complexity, low privileges required, and no user interaction.
What is the impact if the issue is triggered?
The documented impact is a kernel crash, resulting in high availability impact. The CVSS vector reports no confidentiality or integrity impact.
What mitigation is indicated when patching is not immediately possible?
Avoid unloading or removing the NAU8821 component driver while jack-detection work may be pending. The fix cancels unscheduled jack-detection work or waits for it to finish before driver removal.