CVE-2026-93143staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() ipu7_resume() calls pm_runtime_get_sync() before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without dropping the reference. Use pm_runtime_resume_and_get() instead, which balances the usage count on failure and avoids the leak. Keep returning 0 on error, as resume callbacks should not propagate failures to the PM core, matching the behaviour of the ipu6 driver.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 before 593fda71983b9c23c84a566b20c53dc402c6b376; from b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 before 437d6d15936db87485afabf7d52754b7b19cc787; from b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 before b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf | CNA record |
References
- https://git.kernel.org/stable/c/593fda71983b9c23c84a566b20c53dc402c6b376
- https://git.kernel.org/stable/c/437d6d15936db87485afabf7d52754b7b19cc787
- https://git.kernel.org/stable/c/b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.