Medium 5.5Published Jan 25, 2026

CVE-2026-23006ASoC: tlv320adcx140: fix null pointer

Updated under an hour ago (Oct 26, 2026, 6:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null pointer The "snd_soc_component" in "adcx140_priv" was only used once but never set. It was only used for reaching "dev" which is already present in "adcx140_priv".

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4e82971f7b556cff3491c867e8840e7d788693b9 before 954260a32c21d5072d8e7253c0a8b1627927cb02; from 4e82971f7b556cff3491c867e8840e7d788693b9 before 659939d08e5f7bc17b941c53e8c9c0a6c6113b21; from 4e82971f7b556cff3491c867e8840e7d788693b9 before 61757f5191daab863d25f03680e912b5449a1eed; from 4e82971f7b556cff3491c867e8840e7d788693b9 before 53bd838ed5950cb18927e4b2e8ee841b7cb10929; from 4e82971f7b556cff3491c867e8840e7d788693b9 before be7664c81d3129fc313ef62ff275fd3d33cfecd4	CNA record
linux linux_kernel linux:linux_kernel	from 6.1.1 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.67; from 6.13 before 6.18.7; 6.1; 6.19; 6.19; 6.19; and 5 more ranges	NVD

References

References

https://git.kernel.org/stable/c/954260a32c21d5072d8e7253c0a8b1627927cb02	patch
https://git.kernel.org/stable/c/659939d08e5f7bc17b941c53e8c9c0a6c6113b21	patch
https://git.kernel.org/stable/c/61757f5191daab863d25f03680e912b5449a1eed	patch
https://git.kernel.org/stable/c/53bd838ed5950cb18927e4b2e8ee841b7cb10929	patch
https://git.kernel.org/stable/c/be7664c81d3129fc313ef62ff275fd3d33cfecd4	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.