CVE-2023-54096

Linux Kernel 5.7.0-6.4.8 Memory Corruption via SoundWire Enumeration

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses two completion structures that allow drivers to wait for soundwire device to become enumerated on the bus and initialised by their drivers, respectively. The code implementing the signalling is currently broken as it does not signal all current and future waiters and also uses the wrong reinitialisation function, which can potentially lead to memory corruption if there are still waiters on the queue. Not signalling future waiters specifically breaks sound card probe deferrals as codec drivers can not tell that the soundwire device is already attached when being reprobed. Some codec runtime PM implementations suffer from similar problems as waiting for enumeration during resume can also timeout despite the device already having been enumerated.

Scores

EPSS 0.0018
EPSS Percentile 8.1%

Details

Status published
Products (16)
linux/Kernel 5.11.0 - 5.15.126linux
linux/Kernel 5.16.0 - 6.1.43linux
linux/Kernel 5.7.0 - 5.10.190linux
linux/Kernel 6.2.0 - 6.4.8linux
Linux/Linux < 5.7
Linux/Linux 5.10.190 - 5.10.*
Linux/Linux 5.15.126 - 5.15.*
Linux/Linux 5.7
Linux/Linux 6.1.43 - 6.1.*
Linux/Linux 6.4.8 - 6.4.*
... and 6 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026