CVE-2026-23129

CVE-2026-23129 addresses a vulnerability in the Linux kernel's dpll subsystem, specifically preventing duplicate registrations of pins. Previously, the kernel would silently increment a reference count for duplicate registrations, leading to potential memory corruption or system instability upon unregistration. This issue has been resolved by implementing a strict "register once" policy, returning -EEXIST for subsequent attempts. The vulnerability has no assigned CVSS score, indicating a potentially low severity, and its FAUCET Risk Score is 20/100. While the exact attack vector and complexity are not detailed, the impact could involve system instability or crashes due to incorrect memory handling. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. This suggests it is not currently a high-profile threat.