Bug 2541264 (CVE-2026-98093) - CVE-2026-98093 kernel: ASoC: fsl_micfil: balance mclk enable/disable
Summary: CVE-2026-98093 kernel: ASoC: fsl_micfil: balance mclk enable/disable
Keywords:
Status: NEW
Alias: CVE-2026-98093
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-25 11:12 UTC by OSIDB Bzimport
Modified: 2026-10-27 19:28 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-25 11:12:23 UTC
In the Linux kernel, the following vulnerability has been resolved:

ASoC: fsl_micfil: balance mclk enable/disable

hw_params() enables mclk unconditionally and hw_free() disables it
unconditionally, but the PCM core does not guarantee 1:1 pairing:
hw_free() can run without hw_params(), and hw_params() can be called
multiple times from the SETUP state. This triggers an "already
disabled" WARN() in the first case and leaks an enable reference in
the second, leaving the clock ungateable.

Guard both sides with the existing mclk_flag, as fsl_sai.c does with
mclk_streams.


Note You need to log in before you can comment on or make changes to this bug.