CVE-2026-23301

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23301", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.993Z", "datePublished": "2026-03-25T10:26:56.830Z", "dateUpdated": "2026-05-11T22:04:14.186Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:04:14.186Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SDCA: Add allocation failure check for Entity name\n\nCurrently find_sdca_entity_iot() can allocate a string for the\nEntity name but it doesn't check if that allocation succeeded.\nAdd the missing NULL check after the allocation."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/sdca/sdca_functions.c"], "versions": [{"version": "48fa77af2f4a55ab961520f2a0e50560dc0baca8", "lessThan": "bdcc10a86055beb7109a786d94abf5626f375bbd", "status": "affected", "versionType": "git"}, {"version": "48fa77af2f4a55ab961520f2a0e50560dc0baca8", "lessThan": "27990181031fdcdbe0f7c46011f6404e5d116386", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/sdca/sdca_functions.c"], "versions": [{"version": "6.19", "status": "affected"}, {"version": "0", "lessThan": "6.19", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.7", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "6.19.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/bdcc10a86055beb7109a786d94abf5626f375bbd"}, {"url": "https://git.kernel.org/stable/c/27990181031fdcdbe0f7c46011f6404e5d116386"}], "title": "ASoC: SDCA: Add allocation failure check for Entity name", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/sdca/sdca_functions.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "bdcc10a86055beb7109a786d94abf5626f375bbd", "status": "affected", "version": "48fa77af2f4a55ab961520f2a0e50560dc0baca8", "versionType": "git"}, {"lessThan": "27990181031fdcdbe0f7c46011f6404e5d116386", "status": "affected", "version": "48fa77af2f4a55ab961520f2a0e50560dc0baca8", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/sdca/sdca_functions.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.19"}, {"lessThan": "6.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "69245D10-0B71-485E-80C3-A64F077004D3", "versionEndExcluding": "6.19.7", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SDCA: Add allocation failure check for Entity name\n\nCurrently find_sdca_entity_iot() can allocate a string for the\nEntity name but it doesn't check if that allocation succeeded.\nAdd the missing NULL check after the allocation."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nASoC: SDCA: A\u00f1adir comprobaci\u00f3n de fallo de asignaci\u00f3n para el nombre de la Entidad\n\nActualmente, find_sdca_entity_iot() puede asignar una cadena para el nombre de la Entidad, pero no comprueba si esa asignaci\u00f3n tuvo \u00e9xito. A\u00f1adir la comprobaci\u00f3n NULL faltante despu\u00e9s de la asignaci\u00f3n."}], "id": "CVE-2026-23301", "lastModified": "2026-06-17T10:21:17.280", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-03-25T11:16:25.803", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/27990181031fdcdbe0f7c46011f6404e5d116386"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bdcc10a86055beb7109a786d94abf5626f375bbd"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-252"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ASoC: SDCA: Add allocation failure check for Entity name", "id": "2451221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451221"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-252", "details": ["A flaw was found in the Linux kernel's ASoC (Advanced Linux Sound Architecture System on Chip) SDCA (SoundWire Digital Control Adapter) component. The `find_sdca_entity_iot()` function fails to check for successful memory allocation when assigning an entity name. This vulnerability could allow a local attacker to cause a denial of service, leading to system instability or a crash."], "name": "CVE-2026-23301", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-03-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23301\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23301\nhttps://lore.kernel.org/linux-cve-announce/2026032527-CVE-2026-23301-09e7@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[48fa77af2f4a55ab961520f2a0e50560dc0baca8,bdcc10a86055beb7109a786d94abf5626f375bbd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[48fa77af2f4a55ab961520f2a0e50560dc0baca8,27990181031fdcdbe0f7c46011f6404e5d116386)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.7,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-03-26T14:04:43.597558+00:00", "value": {"mitigation_remediation": ["Update the Linux kernel to a version that includes the vulnerable function fix or apply the patch from the referenced commits", "Reboot the system after the kernel update to ensure the new code is active", "Verify the running kernel version with \"uname -r\" to confirm the patch is in place", "If an immediate kernel update is impossible, limit exposure by preventing unprivileged users from accessing SDCA devices or disabling the audio subsystem until a patch can be applied", "Monitor vendor channels and update feeds for any future vulnerability disclosures or additional mitigation guidance"], "summary": {"action": "Patch Immediately", "impact": "Denial of Service (kernel crash)"}, "threat_synthesis": {"affected_systems": "All Linux kernel versions prior to the patch commit referenced in the advisory are affected. The vulnerability applies to the support for Single Device Clock Administration (SDCA) under the Advanced SoC (ASoC) audio subsystem. Users running any unpatched Linux distribution that includes the vulnerable kernel code are at risk. Vendor/vendor combination \"Linux:Linux\" indicates the kernel itself, with no specific application or driver product name listed.", "description_and_impact": "The Linux kernel contains a logic flaw in the ASoC SDCA subsystem where the helper function for allocating an entity name does not verify that the memory allocation succeeded. If the allocation fails, a NULL pointer dereference can occur, causing an OOPS and potentially bringing the entire system down. This is a classic null pointer dereference weakness (CWE\u2011252) that impacts system reliability rather than providing direct remote code execution.", "risk_and_exploitability": "The CVSS score of 5.5 reflects a moderate severity, and the EPSS score of less than 1% suggests that automated exploitation is unlikely at this time. The vulnerability is not listed in CISA\u2019s Known Exploited Vulnerabilities catalog, indicating no known public exploits. The likely attack vector would require interaction with the audio subsystem's SDCA interface, possibly via an application that can trigger the allocation path; however, this is inferred from the code context rather than stated explicitly in the advisory. Security professionals should consider the risk as moderate but non\u2011critical, pending a patch."}}}}, "created": "2026-03-25T21:15:29.420170+00:00", "updated": "2026-03-27T09:50:05.367004+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}