CVE-2026-23301 — Unchecked Return Value in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SDCA: Add allocation failure check for Entity name
Currently find_sdca_entity_iot() can allocate a string for the
Entity name but it doesn't check if that allocation succeeded.
Add the missing NULL check after the allocation.
Affected Packages4 packages
▶CVEListV5linux/linux48fa77af2f4a55ab961520f2a0e50560dc0baca8 — bdcc10a86055beb7109a786d94abf5626f375bbd+2
🔴Vulnerability Details
3OSV▶
CVE-2026-23301: In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add allocation failure check for Entity name Currently find_sdca_entit↗2026-03-25
GHSA▶
GHSA-hjww-hmp9-xppj: In the Linux kernel, the following vulnerability has been resolved:
ASoC: SDCA: Add allocation failure check for Entity name
Currently find_sdca_ent↗2026-03-25