CVE-2026-23006: ASoC: tlv320adcx140: fix null pointer
In the Linux kernel, the following vulnerability has been resolved:
ASoC: tlv320adcx140: fix null pointer
The "sndsoccomponent" in "adcx140priv" was only used once but never set. It was only used for reaching "dev" which is already present in "adcx140priv".
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23006?
CVE-2026-23006 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2026-23006?
To address CVE-2026-23006, update the Linux kernel to the latest version where the fix has been applied.
What component is affected by CVE-2026-23006?
CVE-2026-23006 affects the ASoC (ALSA System on Chip) subsystem, specifically the tlv320adcx140 driver.
Can CVE-2026-23006 cause system crashes?
CVE-2026-23006 may lead to null pointer dereferences which can potentially cause system crashes or instability.
How is CVE-2026-23006 exploited?
CVE-2026-23006 can be exploited by triggering specific audio operations that improperly handle the null pointer.