CVE-2026-43443 ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
Missing error checks in AMD ACP audio drivers allow null pointer dereferences, causing kernel crashes and denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43443?
CVE-2026-43443 is a medium-severity vulnerability in Linux kernel, published on 8 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions.
Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding IS_ERR() checks immediately after each clock acquisition.
Weakness: CWE-476
Which versions are affected by CVE-2026-43443?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43443?
Apply the vendor's patch.
Is CVE-2026-43443 being exploited?
There is no known exploitation of CVE-2026-43443 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43443, DEBIAN-CVE-2026-43443, GHSA-xx4x-7c38-rpq3, ROOT-OS-DEBIAN-12-CVE-2026-43443, ROOT-OS-DEBIAN-13-CVE-2026-43443, ROOT-OS-UBUNTU-2404-CVE-2026-43443 and 1 more.