CVE-2026-64494

iio: light: gp2ap002: fix runtime PM leak on read error

State: Published
Severity: Not scored
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: light: gp2ap002: fix runtime PM leak on read error

gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending.

Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5Affected f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 7110201c6b21455240c63388f30113f3baafacfcAffected f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 2593f0c6ea37df168975694a3b17e7086f11453eAffected f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before f350883989ced96d6da7f582f9a6f9c6ffc94e34Affected f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 29137052c4485c74bc2d1b0717f69ca4de14274fAffected f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 0c655d067ac69ee24e2e9d706c54179ea58a43dbAffected f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 2ebaea7f3089decb01a8294d89d7e0cf288146c4Affected f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 38b72267b7e22768a1f26d9935de4e1752a1dc85Affected f3e84bf3f86bb3b7bd50666bb8ef7a203a656ca3Affected 5.7.6 to before 5.8Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5Affected
f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 7110201c6b21455240c63388f30113f3baafacfcAffected
f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 2593f0c6ea37df168975694a3b17e7086f11453eAffected
f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before f350883989ced96d6da7f582f9a6f9c6ffc94e34Affected
f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 29137052c4485c74bc2d1b0717f69ca4de14274fAffected
f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 0c655d067ac69ee24e2e9d706c54179ea58a43dbAffected
f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 2ebaea7f3089decb01a8294d89d7e0cf288146c4Affected
f6dbf83c17cb223ceabd7c42d441414f3e0e8a86 to before 38b72267b7e22768a1f26d9935de4e1752a1dc85Affected
f3e84bf3f86bb3b7bd50666bb8ef7a203a656ca3Affected
5.7.6 to before 5.8Affected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.