PT-2026-27752 · Cirrus Logic+3 · Cs42L43+3

CVE-2026-23387

·

Publicado

2026-01-01

·

Atualizado

2026-08-30

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the pinctrl subsystem, specifically in the cirrus driver related to the cs42l43 component. A double-put operation exists in the cs42l43 pin probe() function due to devm add action or reset() already invoking the action on failure, leading to an unnecessary and problematic explicit put.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Multiple Releases of Same Resource or Handle

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2026-11850
CVE-2026-23387
OPENSUSE-SU-2026:20826-1
SUSE-SU-2026:21834-1
SUSE-SU-2026:21841-1
SUSE-SU-2026:21845-1
SUSE-SU-2026:21860-1
USN-8567-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8619-1
USN-8665-1

Produtos afetados

Linuxmint
Linux Kernel
Ubuntu
Cs42L43