Skip to main content
VulnerabilityPublished Updated

CVE-2026-43135: Linux kernel · media: cx23885: Add missing unmap in snd_cx23885_hw_params()

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in fda46c9025b755ea50a969b960f333be62421b71 : update Linux kernel when convenient.

Data as of 6 Nov 2026, 16:04 UTC

Severity
Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
CISA SSVC
Exploitation
No evidence of active exploitation and no public proof of concept
Automatable
Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact
Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-06.

Patch
Available – fixed in fda46c9025b755ea50a969b960f333be62421b71, fc4df593a8ffded2f77d69a73ecb51d364932ca5, 544215cc37d032ccaf1919852c05e2439a4d7540 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 6 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 9529a4b0cf49163e489446ec159a2dfb64f78df8, < fda46c9025b755ea50a969b960f333be62421b71
Fixed in
  • fda46c9025b755ea50a969b960f333be62421b71
LinuxLinuxAffected
  • ≥ 9529a4b0cf49163e489446ec159a2dfb64f78df8, < fc4df593a8ffded2f77d69a73ecb51d364932ca5
Fixed in
  • fc4df593a8ffded2f77d69a73ecb51d364932ca5
LinuxLinuxAffected
  • ≥ 9529a4b0cf49163e489446ec159a2dfb64f78df8, < 544215cc37d032ccaf1919852c05e2439a4d7540
Fixed in
  • 544215cc37d032ccaf1919852c05e2439a4d7540
LinuxLinuxAffected
  • ≥ 9529a4b0cf49163e489446ec159a2dfb64f78df8, < 505630dd1ebf4b53d3f2866c057ddd93157a24d8
Fixed in
  • 505630dd1ebf4b53d3f2866c057ddd93157a24d8
LinuxLinuxAffected
  • ≥ 9529a4b0cf49163e489446ec159a2dfb64f78df8, < 9544b73cad4ee667fed6a60f71570c58a870a735
Fixed in
  • 9544b73cad4ee667fed6a60f71570c58a870a735
LinuxLinuxAffected
  • ≥ 9529a4b0cf49163e489446ec159a2dfb64f78df8, < 141c81849fab2ad4d6e3fdaff7cbaa873e8b5eb2
Fixed in
  • 141c81849fab2ad4d6e3fdaff7cbaa873e8b5eb2

AI-suggested

A fix is available and has been applied in multiple Linux kernel commits. Users should update to a Linux kernel version that includes these fixes to resolve the issue.

Description

A vulnerability in the Linux kernel's cx23885 media driver was fixed by adding a missing unmap operation in the snd_cx23885_hw_params() function. The fix ensures that resources allocated by cx23885_alsa_dma_map() are properly released in error paths by calling cx23885_alsa_dma_unmap().

References

Community reviews

Loading reviews…