CVE-2026-23387
Description
A flaw was found in the Linux kernel, specifically within the pinctrl subsystem's cirrus cs42l43 driver. This flaw involves a 'double-put' error in the cs42l43_pin_probe() function, where a resource is incorrectly released twice. This issue arises because the devm_add_action_or_reset() function already handles resource cleanup, leading to a redundant release. Exploiting this vulnerability could lead to memory corruption, potentially causing a system crash or denial of service (DoS).
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: DoS: Crash, Exit, or Restart
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.