Medium 5.5Published May 6, 2026

CVE-2026-43135media: cx23885: Add missing unmap in snd_cx23885_hw_params()

Updated under an hour ago (Oct 27, 2026, 9:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Add missing unmap in snd_cx23885_hw_params() In error path, add cx23885_alsa_dma_unmap() to release the resource acquired by cx23885_alsa_dma_map().

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9529a4b0cf49163e489446ec159a2dfb64f78df8 before fda46c9025b755ea50a969b960f333be62421b71; 9529a4b0cf49163e489446ec159a2dfb64f78df8 builds before 0b7f56084cc3d7766bf274b71cd14cc9674b76bf; from 9529a4b0cf49163e489446ec159a2dfb64f78df8 before 505630dd1ebf4b53d3f2866c057ddd93157a24d8; from 9529a4b0cf49163e489446ec159a2dfb64f78df8 before 544215cc37d032ccaf1919852c05e2439a4d7540; 9529a4b0cf49163e489446ec159a2dfb64f78df8 builds before 9c0a6ff538660c36a98081916a24f08d55a91331; from 9529a4b0cf49163e489446ec159a2dfb64f78df8 before 9544b73cad4ee667fed6a60f71570c58a870a735; from 9529a4b0cf49163e489446ec159a2dfb64f78df8 before fc4df593a8ffded2f77d69a73ecb51d364932ca5; 9529a4b0cf49163e489446ec159a2dfb64f78df8 builds before 141c81849fab2ad4d6e3fdaff7cbaa873e8b5eb2	CNA record
linux linux_kernel linux:linux_kernel	from 3.18 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/fda46c9025b755ea50a969b960f333be62421b71	patch
https://git.kernel.org/stable/c/0b7f56084cc3d7766bf274b71cd14cc9674b76bf	patch
https://git.kernel.org/stable/c/505630dd1ebf4b53d3f2866c057ddd93157a24d8	patch
https://git.kernel.org/stable/c/544215cc37d032ccaf1919852c05e2439a4d7540	patch
https://git.kernel.org/stable/c/9c0a6ff538660c36a98081916a24f08d55a91331	patch
https://git.kernel.org/stable/c/9544b73cad4ee667fed6a60f71570c58a870a735	patch
https://git.kernel.org/stable/c/fc4df593a8ffded2f77d69a73ecb51d364932ca5	patch
https://git.kernel.org/stable/c/141c81849fab2ad4d6e3fdaff7cbaa873e8b5eb2	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.