CVE-2026-98437media: qcom: iris: fix runtime PM reference leaks
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pm_runtime_resume_and_get() in iris_enable_power_domains() to avoid leaking a runtime PM usage count on failure. Also ensure pm_runtime_put_sync() is always called in iris_disable_power_domains(), even when iris_opp_set_rate() fails, so runtime PM references remain balanced.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from bb8a95aa038e099f5ec82c466e996b006e05abd7 before fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before 7a52e76b63095e05d92f15f16f45421cab9789e1; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before f87d7eda07fca21efe4b96169ae59007db46e60e | CNA record |
References
- https://git.kernel.org/stable/c/fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795
- https://git.kernel.org/stable/c/7a52e76b63095e05d92f15f16f45421cab9789e1
- https://git.kernel.org/stable/c/f87d7eda07fca21efe4b96169ae59007db46e60e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.