What is CVE-2026-23190?

CVE-2026-23190 is a medium-severity software vulnerability (CWE-401) with a CVSS score of 5.5. In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops

Is CVE-2026-23190 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

What products does CVE-2026-23190 affect?

Tracked products affected include Linux Kernel. Check the version you run to see whether it is affected.

How do I fix CVE-2026-23190?

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

← All products

CVE-2026-23190

MEDIUM severity · CVSS 5.5 · CWE-401

5.5CVSS MEDIUM

Summary

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops

Impact & exploitability

Attack vectorLocal

Attack complexityLow

Privileges requiredLow

User interactionNone

Confidentiality impactNone

Integrity impactNone

Availability impactHigh

Exploit probability (EPSS)0%

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products we track (1)

Linux Kernel

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://git.kernel.org/stable/c/0e0120214b5dcb0bf6b2171bb4e68e38968b2861 ↗

Additional information

NVD record
https://git.kernel.org/stable/c/0e0120214b5dcb0bf6b2171bb4e68e38968b2861Patch
https://git.kernel.org/stable/c/279cb9180510f7e13c3a4dfde8c16a8fbc7c5709Patch
https://git.kernel.org/stable/c/6d33640404968fe9f14a1252b337362b62fff490Patch
https://git.kernel.org/stable/c/7f67ba5413f98d93116a756e7f17cd2c1d6c2bd6Patch
https://git.kernel.org/stable/c/9f23800c7eed06cb8ccae8a225f5e3d421b0d4ccPatch
https://git.kernel.org/stable/c/c9c14d2abe4c5546fcd3a7347fadc4aad2b308d8Patch
https://git.kernel.org/stable/c/d7ead6512650447a4cd6db774a2379acb259650cPatch