EUVD-2026-80543
GHSA-r596-mvwg-48gr
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trigger is platform ACPI firmware (firmware/admin control → PR:H, non-default malformed table → AC:H), local only (AV:L); impact is a kernel crash (A:H) with no real confidentiality (C:N) and marginal integrity (I:L).
Primary rating from Vendor (Linux).
CVSS VectorVendor: Linux
Lifecycle Timeline
7DescriptionCVE.org
In the Linux kernel, the following vulnerability has been resolved:
ASoC: loongson: Fix error handling in ACPI property parsing
In loongson_card_parse_acpi(), the return value of device_property_read_string() for the codec-dai-name property was ignored. If the property is missing or invalid, an uninitialized pointer would be used later, potentially leading to undefined behavior.
Fix this by checking the return value and propagating the error appropriately.
AnalysisAI
A missing error check in the Linux kernel's Loongson ASoC sound-card ACPI probe path (loongson_card_parse_acpi) leaves the pointer returned by device_property_read_string() for the 'codec-dai-name' property uninitialized when that property is absent or invalid, and the stale pointer is dereferenced later during driver binding. Only LoongArch/Loongson platforms whose ACPI firmware omits or malforms codec-dai-name are affected, and reaching the bug requires the ability to supply or modify that firmware description - it is not reachable over the network and not triggerable by an unprivileged local user on a default, correctly-described platform. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the Loongson ASoC sound card driver (sound/soc/loongson, loongson_card_parse_acpi) to bind on a LoongArch/Loongson platform whose ACPI firmware is missing or supplies an invalid 'codec-dai-name' device property; only then is the return value ignored and the uninitialized pointer used. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) substantially overstates real-world risk, and it is also internally inconsistent - the given vector actually computes to 7.8, not 8.4, so the numeric score and the vector disagree. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade to Linux 6.12.110, 6.18.51 or 7.2.5 (or mainline 7.3-rc1 and later), which contain the fix that checks and propagates the device_property_read_string() return value for codec-dai-name; the corresponding upstream stable commits are https://git.kernel.org/stable/c/4e580d84a638f007b5b68d50d7633de502f325e7, https://git.kernel.org/stable/c/682c123cef455545f48ecbe74b3872fa303bf58f, https://git.kernel.org/stable/c/0eb0e3c623ac1da8b85d518043fef7660af7805d and https://git.kernel.org/stable/c/bb1602908c67db7197ab001638573262bccc6ca2, with additional context at https://nvd.nist.gov/vuln/detail/CVE-2026-89943. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether any Loongson/LoongArch servers, workstations, or embedded systems exist in the estate and record their kernel and firmware versions, since these are the only affected platforms; if none exist, document that determination and close the item as not applicable. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today