CVE-2026-98527None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns th…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
gpio: zynq: fix runtime PM leak on request error path
pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it.
gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled.
Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.
Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < e380fba02908b809f5bbef371259003cf5887bb4Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < a3e9b7f7c9558f8c9592f8f817557bff98707bb3Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 60a76cdd92e25f576dc58d756a565760dde1f7a1Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 25c08be2a5e7715f19a6e02bbe9b0e5f01c77aacLinux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 6e05f1c614a57a5d4c364dd12e20c6fd012f9d3eLinux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 58a417a19d80141fff3abe6004e2e47285506e73Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 6e20dabffbcd7b222d8e7bb85a7d8e8325df7699Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < e9438ab5328a177c9c0e5df87eb92a7162841e98Linux 3.17Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device