---
id: CVE-2026-89943
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: loongson: Fix error handling in ACPI property parsing

  In loongson_card_parse_acpi(), the return value of
  device_property_read_string() for the `codec-dai-name` p…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: loongson: Fix error handling in ACPI property parsing

  In loongson_card_parse_acpi(), the return value of
  device_property_read_string() for the `codec-dai-name` p…
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ddb538a3004b10a04a14a0d275c5f52a8d161e80 <
    682c123cef455545f48ecbe74b3872fa303bf58f
  - >-
    Linux >= ddb538a3004b10a04a14a0d275c5f52a8d161e80 <
    4e580d84a638f007b5b68d50d7633de502f325e7
  - >-
    Linux >= ddb538a3004b10a04a14a0d275c5f52a8d161e80 <
    bb1602908c67db7197ab001638573262bccc6ca2
  - >-
    Linux >= ddb538a3004b10a04a14a0d275c5f52a8d161e80 <
    0eb0e3c623ac1da8b85d518043fef7660af7805d
  - Linux 6.12
published: '2026-09-16'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T15:18:19.700'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89943'
references:
  - url: 'https://git.kernel.org/stable/c/0eb0e3c623ac1da8b85d518043fef7660af7805d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4e580d84a638f007b5b68d50d7633de502f325e7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/682c123cef455545f48ecbe74b3872fa303bf58f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bb1602908c67db7197ab001638573262bccc6ca2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-16T10:53:53.966Z'
epss: 0.00182
epssPercentile: 0.08072
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ASoC: loongson: Fix error handling in ACPI property parsing

In loongson_card_parse_acpi(), the return value of
device_property_read_string() for the `codec-dai-name` property was
ignored. If the property is missing or invalid, an uninitialized pointer
would be used later, potentially leading to undefined behavior.

Fix this by checking the return value and propagating the error
appropriately.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
