All vulnerabilities
CVE-2026-98529

Linux: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.22%Chance of exploitation activity in the next 30 days, higher than 11% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in40c010c1866382cb63ba7497d6ec74fcc60ab9cfAlso 61ed58b745c1186006b8357da651abbb7a6bff17, 5c8e87f33b68557a725e72f34051299f55c6fa9e and 3 moreCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 40c010c1866382cb63ba7497d6ec74fcc60ab9cfLinuxCVE List
  • 61ed58b745c1186006b8357da651abbb7a6bff17LinuxCVE List
  • 5c8e87f33b68557a725e72f34051299f55c6fa9eLinuxCVE List
  • 9d8d6cddcb7c0b8125f3a9e52492e929674009d8LinuxCVE List
  • 9ee200f484983b0a178c593e57d2fe3e67061ee8LinuxCVE List
  • 39748357db26b20a02ea2a25ce48943e6c6d6286LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()

Switching a persistent GPIO line from input to output acquires a runtime PM reference on the parent device, but if the subsequent regmap_update_bits() fails the reference is never dropped and no later direction_in() can balance it since the direction was never changed. Drop the reference on the update failure path.

Text from CVE List

Affected versions 18

  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before 40c010c1866382cb63ba7497d6ec74fcc60ab9cfCVE List
  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before 61ed58b745c1186006b8357da651abbb7a6bff17CVE List
  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before 5c8e87f33b68557a725e72f34051299f55c6fa9eCVE List
  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before 9d8d6cddcb7c0b8125f3a9e52492e929674009d8CVE List
  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before 9ee200f484983b0a178c593e57d2fe3e67061ee8CVE List
  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before a9f738487c11fb512dadef097b56020239c21810CVE List
  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before 39748357db26b20a02ea2a25ce48943e6c6d6286CVE List
  • Linuxaffected: 27a49ed17e2245cacbdea88ad78b8494653e0338 before e9d810279f84b30738f7790c0ed15f8dd5b9024aCVE List
  • Linuxaffected: 4.13CVE List
  • Linuxunaffected: all versions before 4.13CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8