The adau1372 ASoC driver in the Linux kernel incorrectly used gpiod_set_value() to control a power‑down GPIO that may sleep on I2C‑controlled GPIO expanders. This non‑cansleep API can emit a WARN and, when called from process context, may cause a kernel warning or a deadlock scenario that prevents the device from powering down correctly.

All Linux kernel releases that contain the adau1372 driver prior to the commit introducing gpiod_set_value_cansleep are affected. Systems that load the adau1372 driver for a device that uses an I2C‑controlled GPIO expander for power‑down functionality are at risk, regardless of specific kernel version numbers unless the patch has been integrated.

The CVSS score is 2.5 and the EPSS score is less than 1%, indicating low severity and low likelihood of exploitation. The description indicates that the driver misuses an API that may sleep, which could lead to a kernel warning or deadlock when powering down the adau1372 codec. No publicly available exploits are known, and exploitation would presumably require local control to load or enable the affected driver. The lack of KEV listing and the low EPSS suggest that this issue is unlikely to be targeted in the wild, but it may still cause equipment malfunction or uptime problems.