CVE-2026-46262

A flaw was found in the Linux kernel's audio subsystem, specifically in the fsl_xcvr module. This vulnerability allows a local user to trigger a deadlock condition within the system. By attempting to acquire a read lock while already holding a write lock in the same process, the system can become unresponsive. This issue ultimately leads to a Denial of Service (DoS), where the system hangs and becomes unusable.

This vulnerability is rated as Low severity because exploitation requires local access and relies on hardware-specific audio transceiver controllers rarely deployed in enterprise environments. The underlying issue resides within an ALSA SoC driver intended for embedded NXP/Freescale platforms, which is not active on standard installations unless corresponding hardware is present. Additionally, triggering the flaw requires direct interaction with sound card control interfaces, which are typically restricted to privileged users or local desktop sessions, preventing unauthenticated remote abuse.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.