CVE-2026-23387: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: cirrus: cs42l43: Fix double-put in cs42l43pinprobe()
devmaddactionorreset() already invokes the action on failure, so the explicit put causes a double-put.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23387?
The severity of CVE-2026-23387 is classified as low due to the specific nature of the double-put issue.
How do I fix CVE-2026-23387?
To fix CVE-2026-23387, ensure that you update your Linux kernel to the latest version where the vulnerability has been patched.
What software is affected by CVE-2026-23387?
CVE-2026-23387 affects the Linux kernel specifically in the context of the pinctrl: cirrus: cs42l43 driver.
What is the impact of CVE-2026-23387?
The impact of CVE-2026-23387 is primarily stability-related due to the potential for double reference counting within the driver.
Is CVE-2026-23387 exploitable?
CVE-2026-23387 is not considered directly exploitable as it does not allow for arbitrary code execution but may lead to stability issues in the driver.