PT-2026-27752 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23387

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the pinctrl subsystem, specifically in the cirrus driver related to the cs42l43 component. A double-put operation exists in the cs42l43 pin probe() function due to devm add action or reset() already invoking the action on failure, leading to an unnecessary and problematic explicit put.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-23387

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

Affected Products

Linux Kernel

Cs42L43

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23387.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23387 · Vendor Advisory
• https://git.kernel.org/stable/c/ea07fcfbba4301839db3784f09955d9fa3e98090 · Patch
• https://osv.dev/vulnerability/CVE-2026-23387 · Vendor Advisory
• https://git.kernel.org/stable/c/1e0465139fd9caee7ffefe285ef7d5f21919e474 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23387 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23387 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23387 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23387 · Vendor Advisory
• https://git.kernel.org/stable/c/fd5bed798f45eb3a178ad527b43ab92705faaf8a · Patch
• https://git.kernel.org/stable/c/95b14ecc56881dd9a187e1e84dd0daa88ff22c5d · Patch
• https://git.kernel.org/stable/c/188ba3468cb7c098c62609d82e9fc58d29ead7f4 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23387 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23387 · Security Note
• https://ubuntu.com/security/CVE-2026-23387 · Vendor Advisory