CVE-2023-54096 soundwire: fix enumeration completion
A flaw in the Linux kernel soundwire subsystem can lead to memory corruption and denial of service due to improper completion signaling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-54096?
CVE-2023-54096 is a high-severity memory corruption vulnerability in Linux, published on 24 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
soundwire: fix enumeration completion
The soundwire subsystem uses two completion structures that allow drivers to wait for soundwire device to become enumerated on the bus and initialised by their drivers, respectively.
The code implementing the signalling is currently broken as it does not signal all current and future waiters and also uses the wrong reinitialisation function, which can potentially lead to memory corruption if there are still waiters on the queue.
Not signalling future waiters specifically breaks sound card probe deferrals as codec drivers can not tell that the soundwire device is already attached when being reprobed. Some codec runtime PM implementations suffer from similar problems as waiting for enumeration during resume can also timeout despite the device already having been enumerated.
Which versions are affected by CVE-2023-54096?
How do I fix CVE-2023-54096?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-54096 being exploited?
There is no known exploitation of CVE-2023-54096 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-54096, DEBIAN-CVE-2023-54096, GHSA-qr7q-qr63-44c5, UBUNTU-CVE-2023-54096.