Skip to main content
VulnerabilityPublished Updated

CVE-2026-93184: Linux kernel · ASoC: fsl_audmix: rework runtime PM handling in probe

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in e921cc73fae68ccee932ad0a4fb11d637557db0e : patch Linux kernel soon.

Data as of 26 Oct 2026, 15:59 UTC

Severity
High

Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 10% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in e921cc73fae68ccee932ad0a4fb11d637557db0e, b5c3f8015af442c2411722cf8c220cfbae271230, 3359ba93d01a23b2e4249e9e44ccfe48eb9c5d71 +1

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 17 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to e921cc73fae68ccee932ad0a4fb11d637557db0e, b5c3f8015af442c2411722cf8c220cfbae271230, 3359ba93d01a23b2e4249e9e44ccfe48eb9c5d71 or 22c944e440bc9b16c4ee409943d69bb8ef575c9e.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ be1df61cf06efb355c90702e46b8d46f055acb4e, < e921cc73fae68ccee932ad0a4fb11d637557db0e
Fixed in
  • e921cc73fae68ccee932ad0a4fb11d637557db0e
LinuxLinuxAffected
  • ≥ be1df61cf06efb355c90702e46b8d46f055acb4e, < b5c3f8015af442c2411722cf8c220cfbae271230
Fixed in
  • b5c3f8015af442c2411722cf8c220cfbae271230
LinuxLinuxAffected
  • ≥ be1df61cf06efb355c90702e46b8d46f055acb4e, < 3359ba93d01a23b2e4249e9e44ccfe48eb9c5d71
Fixed in
  • 3359ba93d01a23b2e4249e9e44ccfe48eb9c5d71
LinuxLinuxAffected
  • ≥ be1df61cf06efb355c90702e46b8d46f055acb4e, < 22c944e440bc9b16c4ee409943d69bb8ef575c9e
Fixed in
  • 22c944e440bc9b16c4ee409943d69bb8ef575c9e
LinuxLinuxAffected
  • =5.2
Fixed in–

AI-suggested

A fix is available and has been applied in the Linux kernel commits identified by hashes e921cc73fae68ccee932ad0a4fb11d637557db0e, b5c3f8015af442c2411722cf8c220cfbae271230, 3359ba93d01a23b2e4249e9e44ccfe48eb9c5d71, and 22c944e440bc9b16c4ee409943d69bb8ef575c9e. Users should update to a kernel version including these fixes. No additional mitigation is required beyond applying the official patch.

Description

A vulnerability in the Linux kernel's ASoC fsl_audmix driver causes system hangs due to register writes targeting unpowered hardware between probe initialization and the first runtime resume. This occurs because the AUDMIX block remains powered off after pm_runtime_enable() until the first runtime resume. The issue is fixed by powering up the hardware immediately after enabling runtime PM and handling cases where runtime PM is disabled.

References

Community reviews

Loading reviews…