CVE-2026-23129

dpll: Prevent duplicate registrations

published February 14, 2026

CVSS
—
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dpll: Prevent duplicate registrations

Modify the internal registration helpers dpll_xa_ref_{dpll,pin}_add()

to reject duplicate registration attempts.

Previously, if a caller attempted to register the same pin multiple

times (with the same ops, priv, and cookie) on the same device, the core

silently increments the reference count and return success. This behavior

is incorrect because if the caller makes these duplicate registrations

then for the first one dpll_pin_registration is allocated and for others

the associated dpll_pin_ref.refcount is incremented. During the first

unregistration the associated dpll_pin_registration is freed and for

others WARN is fired.

Fix this by updating the logic to return `-EEXIST` if a matching

registration is found to enforce a strict "register once" policy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00134 · 2.7th percentile
Published
2026-02-14T15:09Z
EPSS history
Timeline
  • 14 FEB 15:09Z
    dpll: Prevent duplicate registrations
    cvelistv5