CVE-2026-43480

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-43480
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43480.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43480
Downstream
Related
Published
2026-05-13T15:08:28Z
Modified
2026-08-27T18:26:56Z
Summary
ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition

The acp3x_5682_init() function did not check the return value of clk_get(), which could lead to dereferencing error pointers in rt5682_clk_enable().

Fix this by:

  1. Changing clk_get() to the device-managed devm_clk_get().
  2. Adding proper IS_ERR() checks for both clock acquisitions.
Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43480.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6b8e4e7db3cd236a2cbb720360fb135087a2ac1d
Fixed
2dc43ac8da7b2bebc5a51a3d86a6275d78f27cff
Fixed
4d802f23fcbfec05134653fd001f6c7c3fd55196
Fixed
2b0c4a399c8d27f20ecf17dda76751141d6dbb59
Fixed
35c7624d30cb45ec336cd16ce072acc32ae351cb
Fixed
33de168afdd57265a0e0c20dbd3648a2d8f7cdc4
Fixed
790851ecc983c719fa2e6adb17b02f3acc1d217d
Fixed
092522621901b5e6af61db04a53f5b313903c6d0
Fixed
53f3a900e9a383d47af7253076e19f510c5708d0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43480.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.7.0
Fixed
5.10.253
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.203
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.167
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.130
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.78
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.19
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43480.json"