CVE-2026-80816

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1

Description An issue exists in the ALSA FCP component where the fcp init notify() function incorrectly uses mixer->urb, which is allocated for the optional UAC2 status interrupt endpoint. On devices with this endpoint, the function may return success without submitting an FCP notification URB, leaving the cmd done variable zeroed. Consequently, when fcp init() issues init1 opcode, the wait for completion timeout() function can crash while adding to the zeroed wait.head. Additionally, fcp cleanup urb() may incorrectly kill and free the status URB. Furthermore, after a suspend via fcp reinit(), the URB kill path in fcp notify() can leave a stale count in cmd done, potentially satisfying the next command's wait before the device acknowledges.

Recommendations Update the Linux kernel to version 7.2.5-1.1 or later.