CVE-2026-64494

iio: light: gp2ap002: fix runtime PM leak on read error

N/A

Published: July 25, 2026 at 08:51 AM UTC

Updated: August 17, 2026 at 05:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 5.7.65.7.6 ≤ v < 5.85.8 ≤ v < 5.10.2615.8 ≤ v < 5.15.2125.8 ≤ v < 6.1.1785.8 ≤ v < 6.12.965.8 ≤ v < 6.18.395.8 ≤ v < 6.6.1455.8 ≤ v < 7.1.45.8 ≤ v < 7.25.7.6 5.8f3e84bf3f86bb3b7bd50666bb8ef7a203a656ca3f6dbf83c17cb223ceabd7c42d441414f3e0e8a86

Vendor states this is fixed in 0c655d067ac69ee24e2e9d706c54179ea58a43db (fixed)

Vendor states this is fixed in 2593f0c6ea37df168975694a3b17e7086f11453e (fixed)

Vendor states this is fixed in 29137052c4485c74bc2d1b0717f69ca4de14274f (fixed)

Vendor states this is fixed in 2ebaea7f3089decb01a8294d89d7e0cf288146c4 (fixed)

Vendor states this is fixed in 38b72267b7e22768a1f26d9935de4e1752a1dc85 (fixed)

Vendor states this is fixed in 62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5 (fixed)

Vendor states this is fixed in 7110201c6b21455240c63388f30113f3baafacfc (fixed)

Vendor states this is fixed in f350883989ced96d6da7f582f9a6f9c6ffc94e34 (fixed)

Vendor states this is fixed in 5.10.261 (unaffected)

Vendor states this is fixed in 5.15.212 (unaffected)

Vendor states this is fixed in 5.8 (unaffected)

Vendor states this is fixed in 6.1.178 (unaffected)