CVE-2026-43443: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
In the Linux kernel, the following vulnerability has been resolved:
ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
The acpcardrt5682init() and acpcardrt5682sinit() functions did not check the return values of clkget(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions.
Fix this by: 1. Changing clkget() to the device-managed devmclkget(). 2. Adding ISERR() checks immediately after each clock acquisition.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update acp_card_rt5682_init() and acp_card_rt5682s_init() to check clock acquisition return values with IS_ERR() and replace clk_get() with devm_clk_get().
Linux kernel ACP machine driver clock acquisition error handling = Add IS_ERR() checks after each clock acquisition and use device-managed devm_clk_get() instead of clk_get()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43443?
CVE-2026-43443 has a medium severity rating of 5.5.
How do I fix CVE-2026-43443?
To fix CVE-2026-43443, patch your system with the latest updates that include the resolution for this vulnerability.
What type of vulnerability is CVE-2026-43443?
CVE-2026-43443 is categorized as a Null Pointer Dereference vulnerability in the Linux kernel.
Which software is affected by CVE-2026-43443?
CVE-2026-43443 affects the Linux kernel, specifically the ASoC amd acp-mach-common component.
What are the potential consequences of CVE-2026-43443?
CVE-2026-43443 could lead to a kernel crash due to missing error checks during clock acquisition.