CVE-2026-23129

A flaw was found in the Linux kernel's Digital Phase-Locked Loop (DPLL) framework. A local user can exploit this by repeatedly registering the same DPLL pin or object. This can lead to an inconsistent state within the subsystem when unregistering, causing kernel log warnings and potentially device malfunction. This vulnerability can result in a local Denial of Service (DoS).

A logic flaw in the Linux DPLL framework allows duplicate registrations of the same pin or DPLL object for the same device when the registration parameters match ops priv and cookie. Previously the core treated a duplicate as a success and simply incremented an internal refcount while keeping only one allocated registration object. If a caller then performs a matching number of unregistrations the first unregistration frees the underlying registration structure and subsequent unregistrations trigger WARNs and can leave the subsystem in an inconsistent state. While this is primarily a robustness issue it can be relevant for security because it can be used to induce warnings kernel log noise and potentially device or subsystem malfunction which can amount to a local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.