{
  "cveId": "CVE-2026-89943",
  "url": "https://patchblox.com/security/cve/CVE-2026-89943",
  "summary": "CVE-2026-89943 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-89943, released September 23, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "ASoC: loongson: Fix error handling in ACPI property parsing",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ASoC: loongson: Fix error handling in ACPI property parsing  In loongson_card_parse_acpi(), the return value of device_property_read_string() for the \u0060codec-dai-name\u0060 property was ignored. If the property is missing or invalid, an uninitialized pointer would be used later, potentially leading to undefined behavior.  Fix this by checking the return value and propagating the error appropriately.",
  "published": "2026-09-16T11:17:03Z",
  "severity": "high",
  "cvss": 8.4,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00196,
  "epssPercentile": 0.09328,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89943",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.111-1",
      "fix": "DEBIAN-CVE-2026-89943",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89943",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-89943",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89943",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.111-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-89943",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89943",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}