Riskcovery

CVE-2026-89935

iio: light: apds9306: fix PM reference leak in apds9306_read_data()

State
Published
Severity
Not scored
Published
Sep 16, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: light: apds9306: fix PM reference leak in apds9306_read_data()

apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending.

Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 620d1e6c7a3fcc54c641f091e07b9040f13def19 to before f3d97800b03cd39ec135e544dcd0a93ffd18e4c7Affected
  • 620d1e6c7a3fcc54c641f091e07b9040f13def19 to before 3ce75e455dd6eaa775fb0badb31c0b100c7a01feAffected
  • 620d1e6c7a3fcc54c641f091e07b9040f13def19 to before d378fceaafd79e0dc59d3546bda251a3058062c0Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.5 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.