CVE-2026-43357

iio: gyro: mpu3050-core: fix pm_runtime error handling

MEDIUM
5.5
CVSS Score
Published: May 8, 2026 at 02:21 PM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050-core: fix pm_runtime error handling The return value of pm_runtime_get_sync() is not checked, allowing the driver to access hardware that may fail to resume. The device usage count is also unconditionally incremented. Use pm_runtime_resume_and_get() which propagates errors and avoids incrementing the usage count on failure. In preenable, add pm_runtime_put_autosuspend() on set_8khz_samplerate() failure since postdisable does not run when preenable fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.10 ≤ v < 5.10.2534.10 ≤ v < 5.15.2034.10 ≤ v < 6.1.1674.10 ≤ v < 6.12.784.10 ≤ v < 6.18.194.10 ≤ v < 6.19.94.10 ≤ v < 6.6.1304.10 ≤ v < 7.05.11 ≤ v < 5.15.2035.16 ≤ v < 6.1.1676.13 ≤ v < 6.18.196.19 ≤ v < 6.19.96.2 ≤ v < 6.6.1306.7 ≤ v < 6.12.783904b28efb2c780c23dcddfb87e07fe0230661e54.107.0 rc17.0 rc27.0 rc3
Vendor states this is fixed in 2a86a396aa001a9f9ba2d37dda36573a76f17c90 (fixed)
Vendor states this is fixed in 35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677 (fixed)
Vendor states this is fixed in 42685cf96e28262e0b84d74447f3d99f3f6a72e0 (fixed)
Vendor states this is fixed in 66c0d1d600e7be034959cf49edab104cb5a39258 (fixed)
Vendor states this is fixed in 7a3dec5b265cf87678b10c98a72a435a8e769bb7 (fixed)
Vendor states this is fixed in 8544c488e50206f00630a8bbba43d2c8bd290345 (fixed)
Vendor states this is fixed in 935f57dd43492240e1ca220dd065d624efece6be (fixed)
Vendor states this is fixed in acc3949aab3e8094641a9c7c2768de1958c88378 (fixed)
Vendor states this is fixed in 4.10 (unaffected)
Vendor states this is fixed in 5.10.253 (unaffected)
Vendor states this is fixed in 5.15.203 (unaffected)
Vendor states this is fixed in 6.1.167 (unaffected)
Vendor states this is fixed in 6.12.78 (unaffected)
Vendor states this is fixed in 6.18.19 (unaffected)
Vendor states this is fixed in 6.19.9 (unaffected)
Vendor states this is fixed in 6.6.130 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card