CVE-2026-97407ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt rockchip_pdm_set_fmt() calls pm_runtime_get_sync() before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function continues to perform register accesses while the device state is undefined. Replace pm_runtime_get_sync() with pm_runtime_resume_and_get() and return early on failure to avoid unpowered register accesses.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c85064435fe7a216ec0f0238ef2b8f7cd850a450 before 105ea8b7a29b473cbe3aa1e542997700c98e3adc; from c85064435fe7a216ec0f0238ef2b8f7cd850a450 before aa48db0257ed4cdb52f922d32872dcc8d201925e; from c85064435fe7a216ec0f0238ef2b8f7cd850a450 before 52b77346cf66174ab9bc34504729cd686a9e29b1; from c85064435fe7a216ec0f0238ef2b8f7cd850a450 before 7f0fd754c708785c31b067dd98649e3ec9b8fd72; from c85064435fe7a216ec0f0238ef2b8f7cd850a450 before a9cc27a4a9b5fe013e152841fd8408061fa2312f; from c85064435fe7a216ec0f0238ef2b8f7cd850a450 before b2b5c2ca5a4924271fa86d75a252de32fa285375; from c85064435fe7a216ec0f0238ef2b8f7cd850a450 before ee7b5f7b39332febf917f9ebf212842cc9379815; a8f82720673d41b85145f232c954fe3a365f72b5; and 5 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/105ea8b7a29b473cbe3aa1e542997700c98e3adc
- https://git.kernel.org/stable/c/aa48db0257ed4cdb52f922d32872dcc8d201925e
- https://git.kernel.org/stable/c/52b77346cf66174ab9bc34504729cd686a9e29b1
- https://git.kernel.org/stable/c/7f0fd754c708785c31b067dd98649e3ec9b8fd72
- https://git.kernel.org/stable/c/a9cc27a4a9b5fe013e152841fd8408061fa2312f
- https://git.kernel.org/stable/c/b2b5c2ca5a4924271fa86d75a252de32fa285375
- https://git.kernel.org/stable/c/ee7b5f7b39332febf917f9ebf212842cc9379815
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.