Linux Kernel SDCA ASoC IRQ Cleanup Vulnerability

Vulnerability

A vulnerability in the Linux kernel's ASoC SDCA component has been addressed, concerning improper interrupt request (IRQ) management. The issue arose because IRQs, once enabled during the component probe phase, could persist even after the sound card was removed. This persistence led to crashes, as some IRQ handlers retained references to the sound card and its controls, causing failures. The vulnerability was linked to the use of 'devm_request_threaded_irq()', which is not recommended outside of bus probe contexts. The IRQs have now been restructured to allow for manual cleanup, preventing such crashes.

Impact

The improper IRQ management could lead to system crashes by causing failures in the IRQ handlers, which rely on references to the sound card and its controls.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: May 6, 2026, 10:48 AM
Updated: May 6, 2026, 10:48 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.5
remediation
7.7
relevance
7.6
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.