CVE-2026-89945: ASoC: cs35l34: drain threaded IRQ before runtime suspend
ASoC: cs35l34: drain threaded IRQ before runtime suspend
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.157.1-1
Event History
Frequently Asked Questions
Which systems can encounter this issue?
A running Linux system using the cs35l34 codec driver can reach the vulnerable window during runtime power management when critical fault IRQs remain unmasked.
What timing condition causes the unsafe access?
The condition occurs if the threaded IRQ handler runs after runtime suspend has enabled regcache cache-only mode and removed live hardware access, but before the device is resumed and register access is restored.
What does the fix need to do?
The driver should disable and drain the IRQ before enabling cache-only mode, asserting reset, or powering off the device. It should re-enable the IRQ only after runtime resume has restored live register access and completed regcache synchronization.
Is IRQ setup failure relevant to applying the fix?
Yes. Probe can continue after request_threaded_irq() fails, so the driver must track whether the IRQ was actually installed before attempting to disable or re-enable it.