CVE-2026-89934
iio: light: ltrf216a: fix runtime PM reference leak in error path
- State
- Published
- Severity
- Not scored
- Published
- Sep 16, 2026
- Updated
- Oct 30, 2026
- Reserved
- Sep 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: light: ltrf216a: fix runtime PM reference leak in error path
ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference.
This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read.
Fix this by releasing the runtime PM reference before returning from the error path.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
LinuxLinux |
|
LinuxLinux |
|
References
- https://git.kernel.org/stable/c/a065b8b596d23de4b2e108d78ba34d17e723c865
- https://git.kernel.org/stable/c/4bf5525c6ff4a9f8df35bcc227a918b6396b2cb5
- https://git.kernel.org/stable/c/c4f003d8578f5718fe1ec332bc89f9ff69fd205b
- https://git.kernel.org/stable/c/0614928a3eda35bddd8c2f02311e286b59bbe746
- https://git.kernel.org/stable/c/80e7381e8cccb543397572af153865f34aaf4353
- https://git.kernel.org/stable/c/c132aef0e757a39036b1d40faf0569f2e343b13e
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.