CVE-2026-43135

media: cx23885: Add missing unmap in snd_cx23885_hw_params()

MEDIUM
5.5
CVSS Score
Published: May 6, 2026 at 11:27 AM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Add missing unmap in snd_cx23885_hw_params() In error path, add cx23885_alsa_dma_unmap() to release the resource acquired by cx23885_alsa_dma_map().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.18 ≤ v < 5.10.2523.18 ≤ v < 5.15.2023.18 ≤ v < 6.1.1653.18 ≤ v < 6.12.753.18 ≤ v < 6.18.163.18 ≤ v < 6.19.63.18 ≤ v < 6.6.1283.18 ≤ v < 7.05.11 ≤ v < 5.15.2025.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.166.19 ≤ v < 6.19.66.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.753.189529a4b0cf49163e489446ec159a2dfb64f78df8
Vendor states this is fixed in 0b7f56084cc3d7766bf274b71cd14cc9674b76bf (fixed)
Vendor states this is fixed in 141c81849fab2ad4d6e3fdaff7cbaa873e8b5eb2 (fixed)
Vendor states this is fixed in 505630dd1ebf4b53d3f2866c057ddd93157a24d8 (fixed)
Vendor states this is fixed in 544215cc37d032ccaf1919852c05e2439a4d7540 (fixed)
Vendor states this is fixed in 9544b73cad4ee667fed6a60f71570c58a870a735 (fixed)
Vendor states this is fixed in 9c0a6ff538660c36a98081916a24f08d55a91331 (fixed)
Vendor states this is fixed in fc4df593a8ffded2f77d69a73ecb51d364932ca5 (fixed)
Vendor states this is fixed in fda46c9025b755ea50a969b960f333be62421b71 (fixed)
Vendor states this is fixed in 3.18 (unaffected)
Vendor states this is fixed in 5.10.252 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card