CVE-2023-54096
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
24/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
soundwire: fix enumeration completion<br />
<br />
The soundwire subsystem uses two completion structures that allow<br />
drivers to wait for soundwire device to become enumerated on the bus and<br />
initialised by their drivers, respectively.<br />
<br />
The code implementing the signalling is currently broken as it does not<br />
signal all current and future waiters and also uses the wrong<br />
reinitialisation function, which can potentially lead to memory<br />
corruption if there are still waiters on the queue.<br />
<br />
Not signalling future waiters specifically breaks sound card probe<br />
deferrals as codec drivers can not tell that the soundwire device is<br />
already attached when being reprobed. Some codec runtime PM<br />
implementations suffer from similar problems as waiting for enumeration<br />
during resume can also timeout despite the device already having been<br />
enumerated.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/48d1d0ce0782f995fda678508fdae35c5e9593f0
- https://git.kernel.org/stable/c/a36b522767f3a72688893a472e80c9aa03e67eda
- https://git.kernel.org/stable/c/c40d6b3249b11d60e09d81530588f56233d9aa44
- https://git.kernel.org/stable/c/c5265691cd065464d795de5666dcfb89c26b9bc1
- https://git.kernel.org/stable/c/e1d54962a63b6ec04ed0204a3ecca942fde3a6fe



