CVE-2026-80967

High

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex. Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe.

SeverityHigh
CVSS8.4
Exploit probability—
ProductLinux
PublishedSep 11, 2026
First seenSep 11, 2026

How to fix

Update
  • Linux Linux20a0f80f67a1495a57e5a3ba0fa172a0f919691d, 039602d6ddb1febbb0561b30dab04461f78a1319, a5f405adb0229c9cf64eb3d695c333c92e3d3d4f, ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814, c069b3cfd753d6688ea0271c43553631ab38ce10, 7ef9ad82d95dd3c74570d80a689a0570fbc7539e, 7cf280fbef5db6310e1b32074c8c34d1ba459796, 6c97817e20598e5473094e0e38d1f51f1cf4dfff or later

Affected products

ProductAffected versionsFixed in
Linux Linux9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < 20a0f80f67a1495a57e5a3ba0fa172a0f919691d, 9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < 039602d6ddb1febbb0561b30dab04461f78a1319, 9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < a5f405adb0229c9cf64eb3d695c333c92e3d3d4f, 9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814, 9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < c069b3cfd753d6688ea0271c43553631ab38ce10, 9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < 7ef9ad82d95dd3c74570d80a689a0570fbc7539e, 9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < 7cf280fbef5db6310e1b32074c8c34d1ba459796, 9bef72bdb26e291d6dffb04768741a0e49582666 ≤ v < 6c97817e20598e5473094e0e38d1f51f1cf4dfff, 3.1820a0f80f67a1495a57e5a3ba0fa172a0f919691d, 039602d6ddb1febbb0561b30dab04461f78a1319, a5f405adb0229c9cf64eb3d695c333c92e3d3d4f, ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814, c069b3cfd753d6688ea0271c43553631ab38ce10, 7ef9ad82d95dd3c74570d80a689a0570fbc7539e, 7cf280fbef5db6310e1b32074c8c34d1ba459796, 6c97817e20598e5473094e0e38d1f51f1cf4dfff

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-80967 · Linux · Dark Radar