CVE-2026-43443 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions. Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding IS_ERR() checks immediately after each clock acquisition.
A vulnerability exists in the Linux kernel's ASoC AMD ACP machine driver, specifically in the 'acp-card-rt5682-init' and 'acp-card-rt5682s-init' functions. These functions failed to verify the return values of the 'clk_get()' function, which could result in a kernel crash when invalid pointers are later accessed by clock core functions. The issue has been addressed by replacing 'clk_get()' with the device-managed 'devm_clk_get()' and adding 'IS_ERR()' checks immediately after each clock acquisition.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is available in the Linux stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0cee68fb7f4cf1562e067c5a82d25062a973b0d0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/30c64fb9839949f085c8eb55b979cbd8a4c51f00 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.16, < 6.19.9 7.0 rc1 7.0 rc2 7.0 rc3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 21, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |