CVE-2026-64494

Summary

In the Linux kernel, the following vulnerability has been resolved:

iio: light: gp2ap002: fix runtime PM leak on read error

gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending.

Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < 62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5affected
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < 7110201c6b21455240c63388f30113f3baafacfcaffected
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < 2593f0c6ea37df168975694a3b17e7086f11453eaffected
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < f350883989ced96d6da7f582f9a6f9c6ffc94e34affected
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < 29137052c4485c74bc2d1b0717f69ca4de14274faffected
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < 0c655d067ac69ee24e2e9d706c54179ea58a43dbaffected
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < 2ebaea7f3089decb01a8294d89d7e0cf288146c4affected
LinuxLinuxf6dbf83c17cb223ceabd7c42d441414f3e0e8a86 < 38b72267b7e22768a1f26d9935de4e1752a1dc85affected
LinuxLinuxf3e84bf3f86bb3b7bd50666bb8ef7a203a656ca3affected
LinuxLinux5.7.6 < 5.8affected
LinuxLinux5.8affected
LinuxLinux0 < 5.8unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc3 <= *unaffected

Weaknesses

References