OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89943

HIGH · CVSS 8.4 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of ACPI property parsing in the loongson sound card driver, specifically in the `loongson_card_parse_acpi()` function. An uninitialized pointer could be used if the `codec-dai-name` property is missing or invalid, potentially resulting in undefined behavior and system instability. Organizations using Linux systems with loongson hardware should prioritize addressing this issue to mitigate risks associated with system crashes or unpredictable behavior.

CVE
CVE-2026-89943
Severity
HIGH
CVSS
8.4
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: loongson: Fix error handling in ACPI property parsing In loongson_card_parse_acpi(), the return value of device_property_read_string() for the `codec-dai-name` property was ignored. If the property is missing or invalid, an uninitialized pointer would be used later, potentially leading to undefined behavior. Fix this by checking the return value and propagating the error appropriately.