CVE-2026-64481

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: hda/cs35l41: Fix firmware load work teardown<br /> <br /> cs35l41_hda creates ALSA controls whose private data points at the<br /> cs35l41_hda object. The firmware load control can also queue<br /> fw_load_work.<br /> <br /> Those controls are not removed on component unbind, and device remove<br /> only cancels fw_load_work through cs35l41_remove_dsp(). That helper is<br /> skipped when halo_initialized is false. With firmware_autostart<br /> disabled, a firmware load can be requested before the DSP has been<br /> initialized. If the component or device is removed before the queued<br /> work runs, the worker can run after teardown and dereference driver<br /> state that is no longer valid.<br /> <br /> Track the created controls and remove them on unbind so no new control<br /> callback can reach the driver data or queue more work. Then cancel<br /> fw_load_work to drain any request that was already queued. Also cancel<br /> the work unconditionally during device remove before runtime PM teardown.