Medium 5.5Published May 6, 2026

CVE-2026-43257media: cx88: Add missing unmap in snd_cx88_hw_params()

Updated under an hour ago (Oct 28, 2026, 11:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: cx88: Add missing unmap in snd_cx88_hw_params() In error path, add cx88_alsa_dma_unmap() to release resource acquired by cx88_alsa_dma_map().

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b2c75abde0debfb824f72845c3ed77d4b66798a0 before f0d7f735eba963742009b0706e19dd0bed91537a; from b2c75abde0debfb824f72845c3ed77d4b66798a0 before dc911fccc6e08ef46a66b2a42a764252b001ee3c; from b2c75abde0debfb824f72845c3ed77d4b66798a0 before 24f3dabeb97bd0bec8c1c926c97e3eb6a8129225; from b2c75abde0debfb824f72845c3ed77d4b66798a0 before 10ab64f8efc2f479293dce929fde326c285fc96f; from b2c75abde0debfb824f72845c3ed77d4b66798a0 before e3fb15aadfc8643203bbdf97ace0396e4586fa64; from b2c75abde0debfb824f72845c3ed77d4b66798a0 before 1ce8c2a8f050a23240553c8bae628ac623f9dbc1; from b2c75abde0debfb824f72845c3ed77d4b66798a0 before 3baefeeb7b85e1e34eebef399ffa312be7179e30; from b2c75abde0debfb824f72845c3ed77d4b66798a0 before dbc527d980f7ba8559de38f8c1e4158c71a78915	CNA record
linux linux_kernel linux:linux_kernel	from 3.19 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/f0d7f735eba963742009b0706e19dd0bed91537a	patch
https://git.kernel.org/stable/c/dc911fccc6e08ef46a66b2a42a764252b001ee3c	patch
https://git.kernel.org/stable/c/24f3dabeb97bd0bec8c1c926c97e3eb6a8129225	patch
https://git.kernel.org/stable/c/10ab64f8efc2f479293dce929fde326c285fc96f	patch
https://git.kernel.org/stable/c/e3fb15aadfc8643203bbdf97ace0396e4586fa64	patch
https://git.kernel.org/stable/c/1ce8c2a8f050a23240553c8bae628ac623f9dbc1	patch
https://git.kernel.org/stable/c/3baefeeb7b85e1e34eebef399ffa312be7179e30	patch
https://git.kernel.org/stable/c/dbc527d980f7ba8559de38f8c1e4158c71a78915	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.