CVE-2026-89939iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlas_buffer_postenable() acquires a runtime PM reference with pm_runtime_resume_and_get() but returns the result of atlas_set_interrupt() directly. If atlas_set_interrupt() fails, the runtime PM reference is leaked and the device can never autosuspend. Add pm_runtime_put_autosuspend() on the error path to balance the reference.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0e4f336f50debeacd0f81e931e8451f2ae03f685 before c7e91ae6d7802170f53ece09a4ecc6302265d3e4; from 0e4f336f50debeacd0f81e931e8451f2ae03f685 before a595f4d3e4ee1c91c62a298730a77b16dc26b426; from 0e4f336f50debeacd0f81e931e8451f2ae03f685 before 72daa7eb7fc6202fece0bb56487d72af5c49ccdf; from 0e4f336f50debeacd0f81e931e8451f2ae03f685 before aedf8f068d9da774d5cb62e9c9d6e62b2ce64d86; from 0e4f336f50debeacd0f81e931e8451f2ae03f685 before 43bce901047e95bbf8fb63eb471460642e497604; from 0e4f336f50debeacd0f81e931e8451f2ae03f685 before 777e8ebfe6b3fa733694977f0f4cf849e07e925c; from 0e4f336f50debeacd0f81e931e8451f2ae03f685 before bcd3f72e26314edfce7eaf8d7160b3119c7b7fed | CNA record |
References
- https://git.kernel.org/stable/c/c7e91ae6d7802170f53ece09a4ecc6302265d3e4
- https://git.kernel.org/stable/c/a595f4d3e4ee1c91c62a298730a77b16dc26b426
- https://git.kernel.org/stable/c/72daa7eb7fc6202fece0bb56487d72af5c49ccdf
- https://git.kernel.org/stable/c/aedf8f068d9da774d5cb62e9c9d6e62b2ce64d86
- https://git.kernel.org/stable/c/43bce901047e95bbf8fb63eb471460642e497604
- https://git.kernel.org/stable/c/777e8ebfe6b3fa733694977f0f4cf849e07e925c
- https://git.kernel.org/stable/c/bcd3f72e26314edfce7eaf8d7160b3119c7b7fed
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.