Description
In the Linux kernel, the following vulnerability has been resolved:

pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()

devm_add_action_or_reset() already invokes the action on failure,
so the explicit put causes a double-put.
Published: 2026-03-25
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

A double release of a pin controller resource in the cs42l43 driver can trigger a double free in kernel space. This flaw, classified as CWE-1341, may lead to a kernel panic or timing violation that causes the system to become unavailable. The defect does not directly expose data but undermines the operational stability of the affected host.

Affected Systems

Any installation of the Linux kernel that contains the cirrus cs42l43 pin controller driver and has not incorporated the recent commit that removes the redundant release is affected. Version information is not specified, so users should examine kernel releases against the commit identifying the double‑put resolution to determine applicability.

Risk and Exploitability

The EPSS score of less than 1 % indicates a low probability of recent exploitation, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, because the flaw resides in kernel mode, an attacker with local or privilege‑escalation capabilities could trigger a crash and cause a denial of service. The lack of a formal CVSS score makes severity assessment ambiguous, but the potential for a system‑wide outage suggests high impact if exploited.

Generated by OpenCVE AI on March 26, 2026 at 04:25 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the fix for the cs42l43 pin controller driver.

Generated by OpenCVE AI on March 26, 2026 at 04:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 26 Mar 2026 00:15:00 +0000


Wed, 25 Mar 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() devm_add_action_or_reset() already invokes the action on failure, so the explicit put causes a double-put.
Title pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-03-25T10:28:05.031Z

Reserved: 2026-01-13T15:37:46.008Z

Link: CVE-2026-23387

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-25T11:16:39.123

Modified: 2026-03-25T15:41:33.977

Link: CVE-2026-23387

cve-icon Redhat

Severity :

Publid Date: 2026-03-25T00:00:00Z

Links: CVE-2026-23387 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-03-26T12:15:29Z

Weaknesses