CVE-2026-64171

i2c: tegra: fix pm_runtime leak on mutex_lock failure

MEDIUM
5.5
CVSS Score
Published: July 19, 2026 at 03:40 PM UTC
Updated: August 13, 2026 at 03:47 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function returns without calling pm_runtime_put(), leaking the runtime PM reference acquired by the preceding pm_runtime_get_sync(). This prevents the device from ever entering runtime suspend. Add the missing pm_runtime_put() before returning on lock failure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

7.0 ≤ v < 7.0.117.0 ≤ v < 7.16077cfd716fbd4d1f2a3702e49ae8bf65c0726857.1 rc17.1 rc27.1 rc37.1 rc4
Vendor states this is fixed in 57cf4e8d6a57dc2ef5810f4852a23ba4c71b74bb (fixed)
Vendor states this is fixed in 8f7ed203b39004c02479a9156089d87d1ac2c1d8 (fixed)
Vendor states this is fixed in 7.0 (unaffected)
Vendor states this is fixed in 7.0.11 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-667

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card