CVE-2026-23006

ASoC: tlv320adcx140: fix null pointer

EPSS 0.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Jan 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null pointer The "snd_soc_component" in "adcx140_priv" was only used once but never set. It was only used for reaching "dev" which is already present in "adcx140_priv".

Affected products

Linux · Linux

References

https://git.kernel.org/stable/c/53bd838ed5950cb18927e4b2e8ee841b7cb10929 https://git.kernel.org/stable/c/61757f5191daab863d25f03680e912b5449a1eed https://git.kernel.org/stable/c/659939d08e5f7bc17b941c53e8c9c0a6c6113b21 https://git.kernel.org/stable/c/954260a32c21d5072d8e7253c0a8b1627927cb02 https://git.kernel.org/stable/c/be7664c81d3129fc313ef62ff275fd3d33cfecd4