CVE-2026-89934

Summary

In the Linux kernel, the following vulnerability has been resolved:

iio: light: ltrf216a: fix runtime PM reference leak in error path

ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference.

This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read.

Fix this by releasing the runtime PM reference before returning from the error path.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < c4f003d8578f5718fe1ec332bc89f9ff69fd205baffected
LinuxLinux83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < 0614928a3eda35bddd8c2f02311e286b59bbe746affected
LinuxLinux83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < 80e7381e8cccb543397572af153865f34aaf4353affected
LinuxLinux83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f < c132aef0e757a39036b1d40faf0569f2e343b13eaffected
LinuxLinux6.1affected
LinuxLinux0 < 6.1unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.51 <= 6.18.*unaffected
LinuxLinux7.2.5 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References