CVE-2023-54096 Details
Description
In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses two completion structures that allow drivers to wait for soundwire device to become enumerated on the bus and initialised by their drivers, respectively. The code implementing the signalling is currently broken as it does not signal all current and future waiters and also uses the wrong reinitialisation function, which can potentially lead to memory corruption if there are still waiters on the queue. Not signalling future waiters specifically breaks sound card probe deferrals as codec drivers can not tell that the soundwire device is already attached when being reprobed. Some codec runtime PM implementations suffer from similar problems as waiting for enumeration during resume can also timeout despite the device already having been enumerated.
A vulnerability in the Linux kernel's soundwire subsystem can lead to improper enumeration of soundwire devices, potentially causing memory corruption. The issue arises because the current signaling mechanism fails to notify all current and future waiters and uses an incorrect reinitialization function. This flaw disrupts sound card probe deferrals, as codec drivers cannot recognize that a soundwire device is already connected when being reprobed. Additionally, some codec runtime power management implementations may experience similar issues, as they can time out while waiting for enumeration during resume, even though the device has already been enumerated.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that fixes this issue is available in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 24, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/48d1d0ce0782f995fda678508fdae35c5e9593f0 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/a36b522767f3a72688893a472e80c9aa03e67eda | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/c40d6b3249b11d60e09d81530588f56233d9aa44 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/c5265691cd065464d795de5666dcfb89c26b9bc1 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e1d54962a63b6ec04ed0204a3ecca942fde3a6fe | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 24, 2025 | New CVE Received | kernel.org |
Volerion