All vulnerabilities
CVE-2026-98437

Linux: media: qcom: iris: fix runtime PM reference leaks

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in7a52e76b63095e05d92f15f16f45421cab9789e1Fixed versionCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 7a52e76b63095e05d92f15f16f45421cab9789e1LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: fix runtime PM reference leaks

Use pm_runtime_resume_and_get() in iris_enable_power_domains() to avoid leaking a runtime PM usage count on failure.

Also ensure pm_runtime_put_sync() is always called in iris_disable_power_domains(), even when iris_opp_set_rate() fails, so runtime PM references remain balanced.

Text from CVE List

Affected versions 8

  • Linuxaffected: bb8a95aa038e099f5ec82c466e996b006e05abd7 before fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795CVE List
  • Linuxaffected: bb8a95aa038e099f5ec82c466e996b006e05abd7 before 7a52e76b63095e05d92f15f16f45421cab9789e1CVE List
  • Linuxaffected: bb8a95aa038e099f5ec82c466e996b006e05abd7 before f87d7eda07fca21efe4b96169ae59007db46e60eCVE List
  • Linuxaffected: 6.15CVE List
  • Linuxunaffected: all versions before 6.15CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3