i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 11 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path The cdns_i2c_master_xfer() function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path where the function exits directly, which leads to a leak of the runtime PM reference. Make sure that this error path also releases the runtime PM reference.
References
- https://git.kernel.org/stable/c/fd7bf900c3215c77f6d779d1532faa22b79f2430
- https://git.kernel.org/stable/c/2d65599ad1e4f195bbb80752cd5cbc2f1a018dba
- https://git.kernel.org/stable/c/a712b5a95270e62209f5c2201c774f708f75234e
- https://git.kernel.org/stable/c/d0dc6553b5f2b1272c01b0eba5fe2fd89cc59f44
- https://git.kernel.org/stable/c/5b14d7c6ba0ba5d167f5ef588ca6dfe1af6dd0aa
- https://git.kernel.org/stable/c/ae1664f04f504a998737f5bb563f16b44357bcca
European references
- ENISA EUVD · EUVD-2025-205161
- GCVE · GCVE-0-2023-54009
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 1a351b10b9671fc2fac767c40a1c4373b9bf5092 < fd7bf900c3215c77f6d779d1532faa22b79f2430 ; affected 1a351b10b9671fc2fac767c40a1c4373b9bf5092 < 2d65599ad1e4f195bbb80752cd5cbc2f1a018dba ; affected 1a351b10b9671fc2fac767c40a1c4373b9bf5092 < a712b5a95270e62209f5c2201c774f708f75234e ; affected 1a351b10b9671fc2fac767c40a1c4373b9bf5092 < d0dc6553b5f2b1272c01b0eba5fe2fd89cc59f44 ; affected 1a351b10b9671fc2fac767c40a1c4373b9bf5092 < 5b14d7c6ba0ba5d167f5ef588ca6dfe1af6dd0aa ; affected 1a351b10b9671fc2fac767c40a1c4373b9bf5092 < ae1664f04f504a998737f5bb563f16b44357bcca |
| Linux · Linux | affected 5.8 ; unaffected 0 < 5.8 ; unaffected 5.10.180 ≤ 5.10.* ; unaffected 5.15.111 ≤ 5.15.* ; unaffected 6.1.28 ≤ 6.1.* ; unaffected 6.2.15 ≤ 6.2.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |