---
id: CVE-2026-98527
title: 'gpio: zynq: fix runtime PM leak on request error path'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  gpio: zynq: fix runtime PM leak on request error path

  pm_runtime_get_sync() leaves the usage counter incremented even when it
  fails, and zynq_gpio_request() returns th…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    e380fba02908b809f5bbef371259003cf5887bb4
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    a3e9b7f7c9558f8c9592f8f817557bff98707bb3
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    60a76cdd92e25f576dc58d756a565760dde1f7a1
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    58a417a19d80141fff3abe6004e2e47285506e73
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    6e20dabffbcd7b222d8e7bb85a7d8e8325df7699
  - >-
    Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <
    e9438ab5328a177c9c0e5df87eb92a7162841e98
  - Linux 3.17
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:17:45.684Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98527'
references:
  - url: 'https://git.kernel.org/stable/c/e380fba02908b809f5bbef371259003cf5887bb4'
  - url: 'https://git.kernel.org/stable/c/a3e9b7f7c9558f8c9592f8f817557bff98707bb3'
  - url: 'https://git.kernel.org/stable/c/60a76cdd92e25f576dc58d756a565760dde1f7a1'
  - url: 'https://git.kernel.org/stable/c/25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac'
  - url: 'https://git.kernel.org/stable/c/6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e'
  - url: 'https://git.kernel.org/stable/c/58a417a19d80141fff3abe6004e2e47285506e73'
  - url: 'https://git.kernel.org/stable/c/6e20dabffbcd7b222d8e7bb85a7d8e8325df7699'
  - url: 'https://git.kernel.org/stable/c/e9438ab5328a177c9c0e5df87eb92a7162841e98'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.280Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

gpio: zynq: fix runtime PM leak on request error path

pm_runtime_get_sync() leaves the usage counter incremented even when it
fails, and zynq_gpio_request() returns the error without dropping it.

gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(),
which holds the only matching pm_runtime_put(), never runs. The reference
is leaked and the controller can no longer runtime-suspend, so its clock
stays enabled.

Switch to pm_runtime_resume_and_get(), which only increments the usage
counter on success.

## Affected

- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < e380fba02908b809f5bbef371259003cf5887bb4`
- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < a3e9b7f7c9558f8c9592f8f817557bff98707bb3`
- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 60a76cdd92e25f576dc58d756a565760dde1f7a1`
- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac`
- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e`
- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 58a417a19d80141fff3abe6004e2e47285506e73`
- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < 6e20dabffbcd7b222d8e7bb85a7d8e8325df7699`
- `Linux >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 < e9438ab5328a177c9c0e5df87eb92a7162841e98`
- `Linux 3.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.