CVE-2026-90406media: qcom: iris: handle runtime PM resume failure in core deinit
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pm_runtime_resume_and_get() in iris_core_deinit(). If runtime PM resume fails, skip hardware power-off operations but still perform software teardown and state transition. Also skip the corresponding pm_runtime_put_sync() call to avoid unbalanced runtime PM references.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from bb8a95aa038e099f5ec82c466e996b006e05abd7 before e7768f3dae9f2c6e5b80e9c02429550ea39f2be6; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before cb83cfff8dff5d546fadce15596e01b1504b632a; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before 75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc | CNA record |
References
- https://git.kernel.org/stable/c/e7768f3dae9f2c6e5b80e9c02429550ea39f2be6
- https://git.kernel.org/stable/c/cb83cfff8dff5d546fadce15596e01b1504b632a
- https://git.kernel.org/stable/c/75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.