CoreCVE
Back

ASoC: cs35l34: drain threaded IRQ before runtime suspend

Published Sep 16, 2026

Description

cs35l34_runtime_suspend() currently switches the codec into regcache_cache_only(true), asserts reset low, and powers the device off without first quiescing the threaded IRQ registered by devm_request_threaded_irq(). That leaves a window where cs35l34_irq_thread() can still run after suspend has removed live hardware access.

A running system can reach this during runtime PM while the driver still has critical fault IRQs unmasked. If the threaded handler runs in that window, it reads volatile INT_STATUS_1..4 after cache_only has been enabled, ignores the regmap_read() failures, and can still execute the PROT_RELEASE_CTL release sequence or the BST fault power-down writes.

Use disable_irq() before entering cache_only/reset-low/power-off so any in-flight threaded handler is drained and no new IRQ thread can run while the device is suspended. Re-enable the IRQ only after runtime_resume() has restored live register access with regcache_sync(). Since probe only logs request_threaded_irq() failures and keeps going, track whether the IRQ was actually installed before disabling or re-enabling it.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Linux
Published Sep 16, 2026
Updated Sep 16, 2026
Reserved Sep 11, 2026
Link CVE-2026-89945
CISA Vulnrichment
Updated n/a
NVD
Status Received
Modified Sep 16, 2026
Link CVE-2026-89945
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-89945
ENISA EUVD
Assigner Linux
Published Sep 16, 2026
Updated Sep 16, 2026
Exploited since n/a
Link EUVD-2026-80545
EUVD-2026-80545