CVE-2026-89935iio: light: apds9306: fix PM reference leak in apds9306_read_data()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending. Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 620d1e6c7a3fcc54c641f091e07b9040f13def19 before f3d97800b03cd39ec135e544dcd0a93ffd18e4c7; 620d1e6c7a3fcc54c641f091e07b9040f13def19 builds before 3ce75e455dd6eaa775fb0badb31c0b100c7a01fe; from 620d1e6c7a3fcc54c641f091e07b9040f13def19 before d378fceaafd79e0dc59d3546bda251a3058062c0 | CNA record |
References
- https://git.kernel.org/stable/c/f3d97800b03cd39ec135e544dcd0a93ffd18e4c7
- https://git.kernel.org/stable/c/3ce75e455dd6eaa775fb0badb31c0b100c7a01fe
- https://git.kernel.org/stable/c/d378fceaafd79e0dc59d3546bda251a3058062c0
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.