Linux Kernel Vulnerability in ASoC Audio Driver of AMD Products

CVE-2026-43480

What is CVE-2026-43480?

A vulnerability exists in the ASoC audio driver for AMD products within the Linux kernel, specifically related to the acp3x_5682_init() function. The absence of error checking for the return value of clk_get() can result in the dereferencing of error pointers in the rt5682_clk_enable() function, leading to potential instability or crashes. The issue has been addressed by replacing clk_get() with the device-managed devm_clk_get() and incorporating proper IS_ERR() checks to ensure robust error handling for clock acquisitions.

References