---
id: CVE-2026-93143
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

  ipu7_resume() calls pm_runtime_get_sync() before resuming the device.
  If the runtime PM resume fail…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

  ipu7_resume() calls pm_runtime_get_sync() before resuming the device.
  If the runtime PM resume fail…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 <
    593fda71983b9c23c84a566b20c53dc402c6b376
  - >-
    Linux >= b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 <
    437d6d15936db87485afabf7d52754b7b19cc787
  - >-
    Linux >= b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 <
    b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf
  - Linux 6.17
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:18:09.397'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93143'
references:
  - url: 'https://git.kernel.org/stable/c/437d6d15936db87485afabf7d52754b7b19cc787'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/593fda71983b9c23c84a566b20c53dc402c6b376'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.743Z'
epss: 0.00206
epssPercentile: 0.095
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

ipu7_resume() calls pm_runtime_get_sync() before resuming the device.
If the runtime PM resume fails, the usage count remains incremented, but
the error path returns without dropping the reference.

Use pm_runtime_resume_and_get() instead, which balances the usage count
on failure and avoids the leak. Keep returning 0 on error, as resume
callbacks should not propagate failures to the PM core, matching the
behaviour of the ipu6 driver.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.