CVE-2026-89943: ASoC: loongson: Fix error handling in ACPI property parsing
In the Linux kernel, the following vulnerability has been resolved:
ASoC: loongson: Fix error handling in ACPI property parsing
In loongsoncardparseacpi(), the return value of devicepropertyreadstring() for the codec-dai-name property was ignored. If the property is missing or invalid, an uninitialized pointer would be used later, potentially leading to undefined behavior.
Fix this by checking the return value and propagating the error appropriately.
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Systems using the Linux kernel Loongson ASoC driver are exposed when their ACPI configuration is parsed and the codec-dai-name property is missing or invalid.
What condition is required to trigger the vulnerable path?
The codec-dai-name ACPI property must be absent or invalid. In that condition, the driver could later use an uninitialized pointer, causing undefined behavior.
What is the mitigation if an update cannot be applied immediately?
Ensure the relevant ACPI configuration provides a valid codec-dai-name property. The available data does not identify any other workaround.