{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "ddb538a3004b10a04a14a0d275c5f52a8d161e80"
            },
            {
              "fixed": "682c123cef455545f48ecbe74b3872fa303bf58f"
            },
            {
              "fixed": "4e580d84a638f007b5b68d50d7633de502f325e7"
            },
            {
              "fixed": "bb1602908c67db7197ab001638573262bccc6ca2"
            },
            {
              "fixed": "0eb0e3c623ac1da8b85d518043fef7660af7805d"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.12.0"
            },
            {
              "fixed": "6.12.110"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.51"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.2.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89943.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: loongson: Fix error handling in ACPI property parsing\n\nIn loongson_card_parse_acpi(), the return value of\ndevice_property_read_string() for the `codec-dai-name` property was\nignored. If the property is missing or invalid, an uninitialized pointer\nwould be used later, potentially leading to undefined behavior.\n\nFix this by checking the return value and propagating the error\nappropriately.",
  "id": "CVE-2026-89943",
  "modified": "2026-09-17T03:31:05.678416384Z",
  "published": "2026-09-16T10:32:30.527Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0eb0e3c623ac1da8b85d518043fef7660af7805d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4e580d84a638f007b5b68d50d7633de502f325e7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/682c123cef455545f48ecbe74b3872fa303bf58f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/bb1602908c67db7197ab001638573262bccc6ca2"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89943.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89943"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "ASoC: loongson: Fix error handling in ACPI property parsing"
}