CVE-2026-23129

In the Linux kernel, the following vulnerability has been resolved: dpll: Prevent duplicate registrations Modify the internal registration helpers dpll_xa_ref_{dpll,pin}_add() to reject duplicate registration attempts. Previously, if a caller attempted to register the same pin multiple times (with the same ops, priv, and cookie) on the same device, the core silently increments the reference count and return success. This behavior is incorrect because if the caller makes these duplicate registrations then for the first one dpll_pin_registration is allocated and for others the associated dpll_pin_ref.refcount is incremented. During the first unregistration the associated dpll_pin_registration is freed and for others WARN is fired. Fix this by updating the logic to return `-EEXIST` if a matching registration is found to enforce a strict "register once" policy.

• https://git.kernel.org/stable/c/236a657422a564859dcd0db7bdb486abb21a721aPatch
• https://git.kernel.org/stable/c/dfec0501dba8f4711ef142a6a890e4812b7af88cPatch
• https://git.kernel.org/stable/c/f3ddbaaaaf4d0633b40482f471753f9c71294a4aPatch

Published

Feb 14, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23123In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23124In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23125In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23126In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-23127In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23128In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-2313Use after free in CSS in Google Chrome prior to 145.0.7632.4…8.8
• CVE-2026-23130In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23131In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23132In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23133In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23134In the Linux kernel, the following vulnerability has been re…5.5