All vulnerabilities
CVE-2026-97407

Linux: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in105ea8b7a29b473cbe3aa1e542997700c98e3adcAlso 52b77346cf66174ab9bc34504729cd686a9e29b1, 7f0fd754c708785c31b067dd98649e3ec9b8fd72 and 3 moreCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt

rockchip_pdm_set_fmt() calls pm_runtime_get_sync() before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function continues to perform register accesses while the device state is undefined. Replace pm_runtime_get_sync() with pm_runtime_resume_and_get() and return early on failure to avoid unpowered register accesses.

Text from CVE List

Affected versions 22

  • Linuxaffected: c85064435fe7a216ec0f0238ef2b8f7cd850a450 before 105ea8b7a29b473cbe3aa1e542997700c98e3adcCVE List
  • Linuxaffected: c85064435fe7a216ec0f0238ef2b8f7cd850a450 before aa48db0257ed4cdb52f922d32872dcc8d201925eCVE List
  • Linuxaffected: c85064435fe7a216ec0f0238ef2b8f7cd850a450 before 52b77346cf66174ab9bc34504729cd686a9e29b1CVE List
  • Linuxaffected: c85064435fe7a216ec0f0238ef2b8f7cd850a450 before 7f0fd754c708785c31b067dd98649e3ec9b8fd72CVE List
  • Linuxaffected: c85064435fe7a216ec0f0238ef2b8f7cd850a450 before a9cc27a4a9b5fe013e152841fd8408061fa2312fCVE List
  • Linuxaffected: c85064435fe7a216ec0f0238ef2b8f7cd850a450 before b2b5c2ca5a4924271fa86d75a252de32fa285375CVE List
  • Linuxaffected: c85064435fe7a216ec0f0238ef2b8f7cd850a450 before ee7b5f7b39332febf917f9ebf212842cc9379815CVE List
  • Linuxaffected: a8f82720673d41b85145f232c954fe3a365f72b5CVE List
  • Linuxaffected: 88294658ddbe0e35fa48e1679252e86b3b5ba1d2CVE List
  • Linuxaffected: 2f0ec100032e9f23b7561ec6f3b5c8a9806a7100CVE List
  • Linuxaffected: 4.14.118 before 4.15CVE List
  • Linuxaffected: 4.19.42 before 4.20CVE List
  • Linuxaffected: 5.0.15 before 5.1CVE List
  • Linuxaffected: 5.1CVE List
  • Linuxunaffected: all versions before 5.1CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7