iio: light: ltrf216a: fix runtime PM reference leak in error path (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference. This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read. Fix this by releasing the runtime PM reference before returning from the error path.
References
- https://git.kernel.org/stable/c/a065b8b596d23de4b2e108d78ba34d17e723c865
- https://git.kernel.org/stable/c/4bf5525c6ff4a9f8df35bcc227a918b6396b2cb5
- https://git.kernel.org/stable/c/c4f003d8578f5718fe1ec332bc89f9ff69fd205b
- https://git.kernel.org/stable/c/0614928a3eda35bddd8c2f02311e286b59bbe746
- https://git.kernel.org/stable/c/80e7381e8cccb543397572af153865f34aaf4353
- https://git.kernel.org/stable/c/c132aef0e757a39036b1d40faf0569f2e343b13e
European references
- ENISA EUVD · EUVD-2026-80534
- GCVE · GCVE-0-2026-89934
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < a065b8b596d23de4b2e108d78ba34d17e723c865 ; affected 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < 4bf5525c6ff4a9f8df35bcc227a918b6396b2cb5 ; affected 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < c4f003d8578f5718fe1ec332bc89f9ff69fd205b ; affected 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < 0614928a3eda35bddd8c2f02311e286b59bbe746 ; affected 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < 80e7381e8cccb543397572af153865f34aaf4353 ; affected 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < c132aef0e757a39036b1d40faf0569f2e343b13e |
| Linux · Linux | affected 6.1 ; unaffected 0 < 6.1 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.110 ≤ 6.12.* ; unaffected 6.18.51 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |