CVE-2026-89943

CVE-2026-89943

High · published September 16, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: loongson: Fix error handling in ACPI property parsing

In loongson_card_parse_acpi(), the return value of

device_property_read_string() for the `codec-dai-name` property was

ignored. If the property is missing or invalid, an uninitialized pointer

would be used later, potentially leading to undefined behavior.

Fix this by checking the return value and propagating the error

appropriately.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Published
2026-09-16T15:17Z
References (4)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:32Z
    ASoC: loongson: Fix error handling in ACPI property parsing
    cvelistv5