{"id":"CVE-2026-89943","published":"2026-09-16T11:17:03.993","lastModified":"2026-09-16T15:18:19.700","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: loongson: Fix error handling in ACPI property parsing\n\nIn loongson_card_parse_acpi(), the return value of\ndevice_property_read_string() for the `codec-dai-name` property was\nignored. If the property is missing or invalid, an uninitialized pointer\nwould be used later, potentially leading to undefined behavior.\n\nFix this by checking the return value and propagating the error\nappropriately.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/0eb0e3c623ac1da8b85d518043fef7660af7805d","tags":[]},{"url":"https://git.kernel.org/stable/c/4e580d84a638f007b5b68d50d7633de502f325e7","tags":[]},{"url":"https://git.kernel.org/stable/c/682c123cef455545f48ecbe74b3872fa303bf58f","tags":[]},{"url":"https://git.kernel.org/stable/c/bb1602908c67db7197ab001638573262bccc6ca2","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw involves an uninitialized pointer due to unhandled error conditions in the `codec-dai-name` property parsing within the ASoC driver for the loongson platform, which could lead to undefined behavior.","exploitability":"Exploitation requires the `codec-dai-name` property to be missing or invalid, making it moderately difficult. Precondition is the presence of the loongson platform and the ASoC driver in use.","blast_radius":"If exploited, the impact could be severe, potentially leading to system instability or crashes, given the undefined behavior that could result from using an uninitialized pointer.","remediation":"Upgrade to the fixed version 5.19.60 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["undefined-behavior","driver-vulnerability","loongson"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:50:15.593Z"}}