Linux Kernel Pinctrl Cirrus Double-Put Vulnerability in CS42L43 Driver

A vulnerability exists in the Linux kernel's CS42L43 pin control driver, where an improper management of resource handling leads to a double 'put' operation. This issue arises because the 'devm_add_action_or_reset()' function already manages the action on failure, making the additional 'put' redundant and potentially harmful.

Impact

The vulnerability causes a resource management error by introducing a double 'put' condition, which can lead to undefined behavior in the driver.

Reproduction

The vulnerability can be reproduced by probing the CS42L43 pin control driver in a platform device context. The 'cs42l43_pin_probe' function will incorrectly execute a double 'put' operation on the device's firmware node handle, creating a resource management issue.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.