CVE-2026-23387

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() devm_add_action_or_reset() already invokes the action on failure, so the explicit put causes a double-put. A flaw was found in the Linux kernel, specifically within the pinctrl subsystem’s cirrus cs42l43 driver. This flaw involves a ‘double-put’ error in the cs42l43_pin_probe() function, where a resource is incorrectly released twice. This issue arises because the devm_add_action_or_reset() function already handles resource cleanup, leading to a redundant release. Exploiting this vulnerability could lead to memory corruption, potentially causing a system crash or denial of service (DoS).

Live-patch status from KernelCare for each operating system.