{"cve":"CVE-2026-97909","nvd":{"published":"2026-09-25T11:17:17.847","modified":"2026-10-19T10:17:41.383","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: sti: initialize IRQ lock before requesting IRQ\n\nuni_reader_init() registers the shared IRQ before initializing\nreader->irq_lock. A pending interrupt can invoke the handler while the\nlock is still uninitialized.\n\nInitialize the lock before registering the IRQ so the interrupt path\nalways sees valid lock state.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/04405aeef4f8d7bcac6dcb1947acafdb4420c2c3","https://git.kernel.org/stable/c/181bb64a1333bbf3c369123d05614536f3ae7b7c","https://git.kernel.org/stable/c/3a9552d18fc8174bab015bc941ede19452b184b3","https://git.kernel.org/stable/c/45021eb56211431f0ef44001b7d12cce32d49261","https://git.kernel.org/stable/c/9128265f0fc8031a71775d70786052e5631aac54"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:56:02.509636177+00:00"},"epss":{"cve":"CVE-2026-97909","score":0.0021,"percentile":0.11157,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}