Riskcovery

CVE-2026-93143

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

ipu7_resume() calls pm_runtime_get_sync() before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without dropping the reference.

Use pm_runtime_resume_and_get() instead, which balances the usage count on failure and avoids the leak. Keep returning 0 on error, as resume callbacks should not propagate failures to the PM core, matching the behaviour of the ipu6 driver.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to before 593fda71983b9c23c84a566b20c53dc402c6b376Affected
  • b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to before 437d6d15936db87485afabf7d52754b7b19cc787Affected
  • b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to before b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecfAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.