CVE-2026-90249

iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes

The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes write_event_config() twice. Enabling twice leaks a runtime PM reference, preventing the device from ever suspending again; disabling twice underflows the usage count and triggers a "Runtime PM usage count underflow" warning.

Bail out early when the requested state matches the current state. While at it, switch to pm_runtime_resume_and_get() so a failed resume is propagated to userspace instead of silently marking the event enabled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	97d642e23037c5545266f9564c9b81e6db81b122 to before b2d7a97d75b648a643f60d77f4d6d70161268855Affected 97d642e23037c5545266f9564c9b81e6db81b122 to before 685d9d1e5c47e024413981fb7eddab86132b04a1Affected 97d642e23037c5545266f9564c9b81e6db81b122 to before 56fe8e5f313a64e458bb6f8b982de925345e21a7Affected 97d642e23037c5545266f9564c9b81e6db81b122 to before 8e76ab81319858736ccf23141e9415f9a1869337Affected 97d642e23037c5545266f9564c9b81e6db81b122 to before 70b9482926ca92862460e659f5e5fde99ae0b4faAffected 97d642e23037c5545266f9564c9b81e6db81b122 to before 0fc740c25c9abb25113398ebb58e2f2ce57741a7Affected 97d642e23037c5545266f9564c9b81e6db81b122 to before 470edb012b1d9a4fba1cd59e329e60f0798c791aAffected 97d642e23037c5545266f9564c9b81e6db81b122 to before 579c049b4cb6fc72ce2c505fc5334540be0efcd3Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

97d642e23037c5545266f9564c9b81e6db81b122 to before b2d7a97d75b648a643f60d77f4d6d70161268855Affected
97d642e23037c5545266f9564c9b81e6db81b122 to before 685d9d1e5c47e024413981fb7eddab86132b04a1Affected
97d642e23037c5545266f9564c9b81e6db81b122 to before 56fe8e5f313a64e458bb6f8b982de925345e21a7Affected
97d642e23037c5545266f9564c9b81e6db81b122 to before 8e76ab81319858736ccf23141e9415f9a1869337Affected
97d642e23037c5545266f9564c9b81e6db81b122 to before 70b9482926ca92862460e659f5e5fde99ae0b4faAffected
97d642e23037c5545266f9564c9b81e6db81b122 to before 0fc740c25c9abb25113398ebb58e2f2ce57741a7Affected
97d642e23037c5545266f9564c9b81e6db81b122 to before 470edb012b1d9a4fba1cd59e329e60f0798c791aAffected
97d642e23037c5545266f9564c9b81e6db81b122 to before 579c049b4cb6fc72ce2c505fc5334540be0efcd3Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.