CVE-2026-90406

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: handle runtime PM resume failure in core deinit

Check the return value of pm_runtime_resume_and_get() in iris_core_deinit().

If runtime PM resume fails, skip hardware power-off operations but still perform software teardown and state transition. Also skip the corresponding pm_runtime_put_sync() call to avoid unbalanced runtime PM references.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbb8a95aa038e099f5ec82c466e996b006e05abd7 < e7768f3dae9f2c6e5b80e9c02429550ea39f2be6affected
LinuxLinuxbb8a95aa038e099f5ec82c466e996b006e05abd7 < cb83cfff8dff5d546fadce15596e01b1504b632aaffected
LinuxLinuxbb8a95aa038e099f5ec82c466e996b006e05abd7 < 75d79879ec3cbfd288144b0ae4c3e3fa7700c5fcaffected
LinuxLinux6.15affected
LinuxLinux0 < 6.15unaffected
LinuxLinux6.18.52 <= 6.18.*unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References