CVE-2026-43355

iio: light: bh1780: fix PM runtime leak on error path

State: Published
Severity: Not scored
Published: May 8, 2026
Updated: Jul 4, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: light: bh1780: fix PM runtime leak on error path

Move pm_runtime_put_autosuspend() before the error check to ensure the PM runtime reference count is always decremented after pm_runtime_get_sync(), regardless of whether the read operation succeeds or fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1f0477f18306c018a954e4f333690a9d0f7efc76 to before 1eb3af4f59e09323788860a9155e9766b12891e5Affected 1f0477f18306c018a954e4f333690a9d0f7efc76 to before 4228f7f053b452be625919ccbb605912bae0dc98Affected 1f0477f18306c018a954e4f333690a9d0f7efc76 to before 424bf90e87134effe4bd932608a15286493b11abAffected 1f0477f18306c018a954e4f333690a9d0f7efc76 to before fc77e0a5600e620a2ae51ec78933162fb217b20bAffected 1f0477f18306c018a954e4f333690a9d0f7efc76 to before ad58fa1cb11e4ceb702786a494352c7ff2eca1edAffected 1f0477f18306c018a954e4f333690a9d0f7efc76 to before aae572ddc28578af476cce7da3faec0395ef0bf0Affected 1f0477f18306c018a954e4f333690a9d0f7efc76 to before 33661bfc85c14836bfef4425a74b0ca2df4bb5adAffected 1f0477f18306c018a954e4f333690a9d0f7efc76 to before dd72e6c3cdea05cad24e99710939086f7a113fb5Affected
LinuxLinux	4.7Affected before 4.7Not affected 5.10.253 through 5.10.Not affected 5.15.211 through 5.15.Not affected 6.1.167 through 6.1.Not affected 6.6.130 through 6.6.Not affected 6.12.95 through 6.12.Not affected 6.18.19 through 6.18.Not affected 6.19.9 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

1f0477f18306c018a954e4f333690a9d0f7efc76 to before 1eb3af4f59e09323788860a9155e9766b12891e5Affected
1f0477f18306c018a954e4f333690a9d0f7efc76 to before 4228f7f053b452be625919ccbb605912bae0dc98Affected
1f0477f18306c018a954e4f333690a9d0f7efc76 to before 424bf90e87134effe4bd932608a15286493b11abAffected
1f0477f18306c018a954e4f333690a9d0f7efc76 to before fc77e0a5600e620a2ae51ec78933162fb217b20bAffected
1f0477f18306c018a954e4f333690a9d0f7efc76 to before ad58fa1cb11e4ceb702786a494352c7ff2eca1edAffected
1f0477f18306c018a954e4f333690a9d0f7efc76 to before aae572ddc28578af476cce7da3faec0395ef0bf0Affected
1f0477f18306c018a954e4f333690a9d0f7efc76 to before 33661bfc85c14836bfef4425a74b0ca2df4bb5adAffected
1f0477f18306c018a954e4f333690a9d0f7efc76 to before dd72e6c3cdea05cad24e99710939086f7a113fb5Affected

LinuxLinux

4.7Affected
before 4.7Not affected
5.10.253 through 5.10.*Not affected
5.15.211 through 5.15.*Not affected
6.1.167 through 6.1.*Not affected
6.6.130 through 6.6.*Not affected
6.12.95 through 6.12.*Not affected
6.18.19 through 6.18.*Not affected
6.19.9 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.