CVE-2026-98529gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Switching a persistent GPIO line from input to output acquires a runtime PM reference on the parent device, but if the subsequent regmap_update_bits() fails the reference is never dropped and no later direction_in() can balance it since the direction was never changed. Drop the reference on the update failure path.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 27a49ed17e2245cacbdea88ad78b8494653e0338 before 40c010c1866382cb63ba7497d6ec74fcc60ab9cf; from 27a49ed17e2245cacbdea88ad78b8494653e0338 before 61ed58b745c1186006b8357da651abbb7a6bff17; 27a49ed17e2245cacbdea88ad78b8494653e0338 builds before 5c8e87f33b68557a725e72f34051299f55c6fa9e; 27a49ed17e2245cacbdea88ad78b8494653e0338 builds before 9d8d6cddcb7c0b8125f3a9e52492e929674009d8; 27a49ed17e2245cacbdea88ad78b8494653e0338 builds before 9ee200f484983b0a178c593e57d2fe3e67061ee8; from 27a49ed17e2245cacbdea88ad78b8494653e0338 before a9f738487c11fb512dadef097b56020239c21810; from 27a49ed17e2245cacbdea88ad78b8494653e0338 before 39748357db26b20a02ea2a25ce48943e6c6d6286; from 27a49ed17e2245cacbdea88ad78b8494653e0338 before e9d810279f84b30738f7790c0ed15f8dd5b9024a | CNA record |
References
- https://git.kernel.org/stable/c/40c010c1866382cb63ba7497d6ec74fcc60ab9cf
- https://git.kernel.org/stable/c/61ed58b745c1186006b8357da651abbb7a6bff17
- https://git.kernel.org/stable/c/5c8e87f33b68557a725e72f34051299f55c6fa9e
- https://git.kernel.org/stable/c/9d8d6cddcb7c0b8125f3a9e52492e929674009d8
- https://git.kernel.org/stable/c/9ee200f484983b0a178c593e57d2fe3e67061ee8
- https://git.kernel.org/stable/c/a9f738487c11fb512dadef097b56020239c21810
- https://git.kernel.org/stable/c/39748357db26b20a02ea2a25ce48943e6c6d6286
- https://git.kernel.org/stable/c/e9d810279f84b30738f7790c0ed15f8dd5b9024a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.