CVE-2026-80967 (CVSS 8.4)

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex. Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe.

Is your site exposed to CVE-2026-80967?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0019

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/039602d6ddb1febbb0561b30dab04461f78a1319 https://git.kernel.org/stable/c/6c97817e20598e5473094e0e38d1f51f1cf4dfff https://git.kernel.org/stable/c/7cf280fbef5db6310e1b32074c8c34d1ba459796 https://git.kernel.org/stable/c/7ef9ad82d95dd3c74570d80a689a0570fbc7539e https://git.kernel.org/stable/c/a5f405adb0229c9cf64eb3d695c333c92e3d3d4f https://git.kernel.org/stable/c/c069b3cfd753d6688ea0271c43553631ab38ce10 https://git.kernel.org/stable/c/ede25b7fea0d7487ee8528bf35dc7b9a1cbcd814

Frequently Asked Questions

What is CVE-2026-80967? +

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handler takes that mutex. Initialize the manager locks before request_threaded_irq() so an early interrupt cannot run against uninitialized mutex state during probe. It has a CVSS v3.1 base score of 8.4 (HIGH).

How severe is CVE-2026-80967? +

CVE-2026-80967 has a CVSS v3.1 score of 8.4 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0019, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-80967? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-80967