Back
CVE-2026-23387pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
- 7.8HighCVSS base score
- 0.13%Exploitation in 30 daysEPSS · top 98% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() devm_add_action_or_reset() already invokes the action on failure, so the explicit put causes a double-put.
Timeline
ID reserved
By Linux
- 2 months later
· 2 months later
Published
- 59 days later
· 59 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.13% · top 98% of all CVEs (13 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 9026f31a520d43cc01eb1c08938fc19efadd78cc – < 95b14ecc56881dd9a187e1e84dd0daa88ff22c5d
- affected 36f91eeffd03f5c52406e0c4e2e0fb040307d00c – < 188ba3468cb7c098c62609d82e9fc58d29ead7f4
- affected 9b07cdf86a0b90556f5b68a6b20b35833b558df3 – < ea07fcfbba4301839db3784f09955d9fa3e98090
- affected 9b07cdf86a0b90556f5b68a6b20b35833b558df3 – < 1e0465139fd9caee7ffefe285ef7d5f21919e474
- affected 9b07cdf86a0b90556f5b68a6b20b35833b558df3 – < fd5bed798f45eb3a178ad527b43ab92705faaf8a
- affected d7adbba9298fd74dde0abed5c93312c08c9e6507
- affected 6.6.118 – < 6.6.130
- affected 6.12.60 – < 6.12.77
- affected 6.17.10 – < 6.18
- affected 6.18
- unaffected < 6.18
- unaffected 6.6.130 – ≤ 6.6.*
- unaffected 6.12.77 – ≤ 6.12.*
- unaffected 6.18.17 – ≤ 6.18.*
- unaffected 6.19.7 – ≤ 6.19.*
- unaffected 7.0 – ≤ *
References
References5
- https://git.kernel.org/stable/c/95b14ecc56881dd9a187e1e84dd0daa88ff22c5d (opens in a new tab)
- https://git.kernel.org/stable/c/188ba3468cb7c098c62609d82e9fc58d29ead7f4 (opens in a new tab)
- https://git.kernel.org/stable/c/ea07fcfbba4301839db3784f09955d9fa3e98090 (opens in a new tab)
- https://git.kernel.org/stable/c/1e0465139fd9caee7ffefe285ef7d5f21919e474 (opens in a new tab)
- https://git.kernel.org/stable/c/fd5bed798f45eb3a178ad527b43ab92705faaf8a (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-15387 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-23387)Record last updated .