CVE-2026-89943

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89943
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89943.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89943
Downstream
Published
2026-09-16T10:32:30Z
Modified
2026-09-17T03:45:37Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ASoC: loongson: Fix error handling in ACPI property parsing
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: loongson: Fix error handling in ACPI property parsing

In loongson_card_parse_acpi(), the return value of device_property_read_string() for the codec-dai-name property was ignored. If the property is missing or invalid, an uninitialized pointer would be used later, potentially leading to undefined behavior.

Fix this by checking the return value and propagating the error appropriately.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89943.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ddb538a3004b10a04a14a0d275c5f52a8d161e80
Fixed
682c123cef455545f48ecbe74b3872fa303bf58f
Fixed
4e580d84a638f007b5b68d50d7633de502f325e7
Fixed
bb1602908c67db7197ab001638573262bccc6ca2
Fixed
0eb0e3c623ac1da8b85d518043fef7660af7805d

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89943.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89943.json"