Linux EUVD-2026-15387

The vulnerability resides in the cs42l43_pin_probe() function within the Linux kernel's pinctrl subsystem, specifically in the cirrus cs42l43 codec pin controller driver. The root cause is a resource management error (CWE-672: Operation on a Resource after Expiration) where devm_add_action_or_reset() is a kernel device management function that automatically executes a cleanup action upon device failure or explicit request. When devm_add_action_or_reset() is called with a put function as the action, it takes ownership of calling that put operation on failure. The bug occurs because after calling devm_add_action_or_reset(), the code path contains an explicit put() call that executes regardless, resulting in double-put when the action is already triggered. This is a common pattern error in devm (device-managed) resource handling where developers mistakenly treat devm functions like non-devm versions, double-freeing reference-counted objects. The affected CPE is cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* with impact on stable kernel branches.