CVE-2026-43443CWE-476

CVE-2026-43443

Medium · published May 8, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not

check the return values of clk_get(). This could lead to a kernel crash

when the invalid pointers are later dereferenced by clock core

functions.

Fix this by:

1. Changing clk_get() to the device-managed devm_clk_get().

2. Adding IS_ERR() checks immediately after each clock acquisition.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-05-08T19:16Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 6.19.96.19.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
EPSS history
Timeline
  • 08 MAY 14:22Z
    ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
    cvelistv5