{"schema":"threatline.record/2","record":{"id":"CVE-2026-98529","aliases":[],"summary":"gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()\n\nSwitching a persistent GPIO line from input to output acquires a\nruntime PM reference on the parent device, but if the subsequent\nregmap_update_bits() fails the reference is never dropped and no later\ndirection_in() can balance it since the direction was never changed.\nDrop the reference on the update failure path.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"40c010c1866382cb63ba7497d6ec74fcc60ab9cf","status":"affected","versionType":"git"},{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"61ed58b745c1186006b8357da651abbb7a6bff17","status":"affected","versionType":"git"},{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"5c8e87f33b68557a725e72f34051299f55c6fa9e","status":"affected","versionType":"git"},{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"9d8d6cddcb7c0b8125f3a9e52492e929674009d8","status":"affected","versionType":"git"},{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"9ee200f484983b0a178c593e57d2fe3e67061ee8","status":"affected","versionType":"git"},{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"a9f738487c11fb512dadef097b56020239c21810","status":"affected","versionType":"git"},{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"39748357db26b20a02ea2a25ce48943e6c6d6286","status":"affected","versionType":"git"},{"version":"27a49ed17e2245cacbdea88ad78b8494653e0338","lessThan":"e9d810279f84b30738f7790c0ed15f8dd5b9024a","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"4.13","status":"affected"},{"version":"0","lessThan":"4.13","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.112","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.55","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.9","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"40c010c1866382cb63ba7497d6ec74fcc60ab9cf","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"61ed58b745c1186006b8357da651abbb7a6bff17","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"5c8e87f33b68557a725e72f34051299f55c6fa9e","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"9d8d6cddcb7c0b8125f3a9e52492e929674009d8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"9ee200f484983b0a178c593e57d2fe3e67061ee8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","source_modified_at":"2026-10-19T09:21:11.695Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"39748357db26b20a02ea2a25ce48943e6c6d6286","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.0022,"percentile":0.11805,"score_date":"2026-10-23"},"published_at":"2026-10-18T15:17:47.577Z","modified_at":"2026-10-19T09:21:11.695Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98529","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:21:11.695Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98529","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/40c010c1866382cb63ba7497d6ec74fcc60ab9cf"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/61ed58b745c1186006b8357da651abbb7a6bff17"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/5c8e87f33b68557a725e72f34051299f55c6fa9e"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/9d8d6cddcb7c0b8125f3a9e52492e929674009d8"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/9ee200f484983b0a178c593e57d2fe3e67061ee8"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/a9f738487c11fb512dadef097b56020239c21810"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/39748357db26b20a02ea2a25ce48943e6c6d6286"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/e9d810279f84b30738f7790c0ed15f8dd5b9024a"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:21:11.695Z","content_hash":"7747ab81fbdc0511a9751a40134eca9495e9c156a72236b533c3df39683ed69c"}}