CVE-2026-80967 ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
A race condition in the ALSA pcxhr driver allows an early interrupt to access uninitialized mutexes, potentially causing a kernel crash.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80967?
CVE-2026-80967 is a high-severity vulnerability in Linux, published on 11 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex.
Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe.
Which versions are affected by CVE-2026-80967?
How do I fix CVE-2026-80967?
Apply the vendor's patch.
Is CVE-2026-80967 being exploited?
There is no known exploitation of CVE-2026-80967 in the wild and no public exploit code.
Sources
Also known as AZL-100464, BELL-CVE-2026-80967, DEBIAN-CVE-2026-80967, GHSA-gf23-mfwg-9j7j, UBUNTU-CVE-2026-80967.