CVE-2026-97407

ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt

N/A
Published: September 24, 2026 at 04:03 PM UTC
Updated: October 3, 2026 at 11:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt rockchip_pdm_set_fmt() calls pm_runtime_get_sync() before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function continues to perform register accesses while the device state is undefined. Replace pm_runtime_get_sync() with pm_runtime_resume_and_get() and return early on failure to avoid unpowered register accesses.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 4.14.118v ≥ 4.19.42v ≥ 5.0.154.14.118 ≤ v < 4.154.19.42 ≤ v < 4.205.0.15 ≤ v < 5.15.1 ≤ v < 5.10.2715.1 ≤ v < 5.15.2225.1 ≤ v < 6.1.1895.1 ≤ v < 6.12.1115.1 ≤ v < 6.18.535.1 ≤ v < 6.6.1585.1 ≤ v < 7.22f0ec100032e9f23b7561ec6f3b5c8a9806a71004.14.1184.19.425.0.155.188294658ddbe0e35fa48e1679252e86b3b5ba1d2a8f82720673d41b85145f232c954fe3a365f72b5c85064435fe7a216ec0f0238ef2b8f7cd850a450
Vendor states this is fixed in 105ea8b7a29b473cbe3aa1e542997700c98e3adc (fixed)
Vendor states this is fixed in 52b77346cf66174ab9bc34504729cd686a9e29b1 (fixed)
Vendor states this is fixed in 7f0fd754c708785c31b067dd98649e3ec9b8fd72 (fixed)
Vendor states this is fixed in a9cc27a4a9b5fe013e152841fd8408061fa2312f (fixed)
Vendor states this is fixed in aa48db0257ed4cdb52f922d32872dcc8d201925e (fixed)
Vendor states this is fixed in b2b5c2ca5a4924271fa86d75a252de32fa285375 (fixed)
Vendor states this is fixed in ee7b5f7b39332febf917f9ebf212842cc9379815 (fixed)
Affected range stops below 4.15, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 5.1 (unaffected)
Vendor states this is fixed in 5.10.271 (unaffected)
Vendor states this is fixed in 5.15.222 (unaffected)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card