Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2026-23387: Linux Kernel: Double-Free Error in CS42L43 Driver

CVE-2026-23387
Summary

A bug in the Linux kernel's CS42L43 driver could cause a double-free error, which can lead to a system crash. This issue has been fixed in a recent kernel update, so updating to the latest version is recommended to prevent potential problems.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versions
linux linux_kernel >= 6.6.118, < 6.6.130
>= 6.12.60, < 6.12.77
>= 6.17.10, < 6.18
>= 6.18.1, < 6.18.17
>= 6.19, < 6.19.7
6.18
7.0
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Original title
In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() devm_add_action_or_reset() already invokes the action on failur...
Original description
In the Linux kernel, the following vulnerability has been resolved:

pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()

devm_add_action_or_reset() already invokes the action on failure,
so the explicit put causes a double-put.
Vulnerability type
CWE-415
Published: 25 Mar 2026 · Updated: 15 Jun 2026 · First seen: 25 Mar 2026