CVE-2026-43443

ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
Oct 30, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions.

Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding IS_ERR() checks immediately after each clock acquisition.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d4c750f2c7d44b5b39e197308bc3f510205bba4b to before f9cdfe3f94e93b606ff5d6e8e6dc405e07acce84Affected
  • d4c750f2c7d44b5b39e197308bc3f510205bba4b to before a71ce398347fed9422dbd5c6458f7f8348012c64Affected
  • d4c750f2c7d44b5b39e197308bc3f510205bba4b to before 53682a55cac6f159311c63d04f3d7ba64a8a455aAffected
  • d4c750f2c7d44b5b39e197308bc3f510205bba4b to before e0e31a7ed1191c12a28763bb70c4c7f5adadc79dAffected
  • d4c750f2c7d44b5b39e197308bc3f510205bba4b to before 0cee68fb7f4cf1562e067c5a82d25062a973b0d0Affected
  • d4c750f2c7d44b5b39e197308bc3f510205bba4b to before 30c64fb9839949f085c8eb55b979cbd8a4c51f00Affected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.