Linux Kernel Soundwire Subsystem Enumeration Completion Vulnerability

Vulnerability

A vulnerability in the Linux kernel's soundwire subsystem can lead to improper enumeration of soundwire devices, potentially causing memory corruption. The issue arises because the current signaling mechanism fails to notify all current and future waiters and uses an incorrect reinitialization function. This flaw disrupts sound card probe deferrals, as codec drivers cannot recognize that a soundwire device is already connected when being reprobed. Additionally, some codec runtime power management implementations may experience similar issues, as they can time out while waiting for enumeration during resume, even though the device has already been enumerated.

Impact

The vulnerability can cause memory corruption and disrupt the proper enumeration of soundwire devices, leading to issues with sound card probing and codec runtime power management.

Reproduction

The vulnerability can be reproduced by using a Linux kernel version that includes the flawed soundwire enumeration signaling. When a soundwire device is attached, the system fails to properly signal that the device has been enumerated, which can cause timeouts during sound card probing and power management operations.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that fixes this issue is available in the Linux kernel stable tree.

Added: Dec 24, 2025, 3:39 PM
Updated: Dec 24, 2025, 3:39 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
1.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.