CVE-2026-23387
kernel: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel, specifically within the pinctrl subsystem's cirrus cs42l43 driver. This flaw involves a 'double-put' error in the cs42l43_pin_probe() function, where a resource is incorrectly released twice. This issue arises because the devm_add_action_or_reset() function already handles resource cleanup, leading to a redundant release. Exploiting this vulnerability could lead to memory corruption, potentially causing a system crash or denial of service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1341 · Multiple Releases of Same Resource or Handle