CVE-2026-43480

ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition

State: Published
Severity: Not scored
Published: May 13, 2026
Updated: May 13, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition

The acp3x_5682_init() function did not check the return value of clk_get(), which could lead to dereferencing error pointers in rt5682_clk_enable().

Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding proper IS_ERR() checks for both clock acquisitions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 2dc43ac8da7b2bebc5a51a3d86a6275d78f27cffAffected 6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 4d802f23fcbfec05134653fd001f6c7c3fd55196Affected 6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 2b0c4a399c8d27f20ecf17dda76751141d6dbb59Affected 6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 35c7624d30cb45ec336cd16ce072acc32ae351cbAffected 6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 33de168afdd57265a0e0c20dbd3648a2d8f7cdc4Affected 6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 790851ecc983c719fa2e6adb17b02f3acc1d217dAffected 6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 092522621901b5e6af61db04a53f5b313903c6d0Affected 6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 53f3a900e9a383d47af7253076e19f510c5708d0Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.167 through 6.1.Not affected 6.6.130 through 6.6.Not affected 6.12.78 through 6.12.Not affected 6.18.19 through 6.18.Not affected 6.19.9 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 2dc43ac8da7b2bebc5a51a3d86a6275d78f27cffAffected
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 4d802f23fcbfec05134653fd001f6c7c3fd55196Affected
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 2b0c4a399c8d27f20ecf17dda76751141d6dbb59Affected
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 35c7624d30cb45ec336cd16ce072acc32ae351cbAffected
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 33de168afdd57265a0e0c20dbd3648a2d8f7cdc4Affected
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 790851ecc983c719fa2e6adb17b02f3acc1d217dAffected
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 092522621901b5e6af61db04a53f5b313903c6d0Affected
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d to before 53f3a900e9a383d47af7253076e19f510c5708d0Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.167 through 6.1.*Not affected
6.6.130 through 6.6.*Not affected
6.12.78 through 6.12.*Not affected
6.18.19 through 6.18.*Not affected
6.19.9 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.