CVE-2026-23129
Description
A flaw was found in the Linux kernel's Digital Phase-Locked Loop (DPLL) framework. A local user can exploit this by repeatedly registering the same DPLL pin or object. This can lead to an inconsistent state within the subsystem when unregistering, causing kernel log warnings and potentially device malfunction. This vulnerability can result in a local Denial of Service (DoS).
Statement
A logic flaw in the Linux DPLL framework allows duplicate registrations of the same pin or DPLL object for the same device when the registration parameters match ops priv and cookie. Previously the core treated a duplicate as a success and simply incremented an internal refcount while keeping only one allocated registration object. If a caller then performs a matching number of unregistrations the first unregistration frees the underlying registration structure and subsequent unregistrations trigger WARNs and can leave the subsystem in an inconsistent state. While this is primarily a robustness issue it can be relevant for security because it can be used to induce warnings kernel log noise and potentially device or subsystem malfunction which can amount to a local denial of service.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.6 | 5.5 | N/A |
| Attack Vector | Local | Local | N/A |
| Attack Complexity | High | Low | N/A |
| Privileges Required | Low | Low | N/A |
| User Interaction | None | None | N/A |
| Scope | Changed | Unchanged | N/A |
| Confidentiality | None | None | N/A |
| Integrity Impact | None | None | N/A |
| Availability Impact | High | High | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Resource Consumption (Memory); DoS: Resource Consumption (Other)
An adversary that can cause a resource counter to become inaccurate may be able to create situations where resources are not accounted for and not released, thus causing resources to become scarce for future needs.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
An adversary that can cause a resource counter to become inaccurate may be able to force an error that causes the product to crash or exit out of its current operation.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
