CVE Database›Document archive›CVE-2026-23387

CVE-2026-23387

kernel: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel, specifically within the pinctrl subsystem's cirrus cs42l43 driver. This flaw involves a 'double-put' error in the cs42l43_pin_probe() function, where a resource is incorrectly released twice. This issue arises because the devm_add_action_or_reset() function already handles resource cleanup, leading to a redundant release. Exploiting this vulnerability could lead to memory corruption, potentially causing a system crash or denial of service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1341 · Multiple Releases of Same Resource or Handle