---
id: CVE-2026-98904
title: 'mailbox: imx: Use devm_pm_runtime_enable()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mailbox: imx: Use devm_pm_runtime_enable()

  sashiko complained about early usage of the device while probe isn't
  completed. This can be mitigated by delaying the pm_run…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    b30a047744ea4344bb6f854b0a052cf276349128
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    adcaa21d50c3a4c884f4d0b7a95fa3bd7a07cf84
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    1f602619e408b6e9655ee76656a2a5ab6e89c5e4
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:54:16.943Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98904'
references:
  - url: 'https://git.kernel.org/stable/c/b30a047744ea4344bb6f854b0a052cf276349128'
  - url: 'https://git.kernel.org/stable/c/adcaa21d50c3a4c884f4d0b7a95fa3bd7a07cf84'
  - url: 'https://git.kernel.org/stable/c/1f602619e408b6e9655ee76656a2a5ab6e89c5e4'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.574Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mailbox: imx: Use devm_pm_runtime_enable()

sashiko complained about early usage of the device while probe isn't
completed. This can be mitigated by delaying the pm_runtime_enable()
into the removal path instead doing it early. This ensures that in an
error case the device is removed (and imx_mu_shutdown()) before
pm_runtime_disable() so we don't have to do this manually.

For the order to work, lets move devm_mbox_controller_register() until
after the pm-runtime part. So the reverse order will be mbox-controller
removal followed by disabling pm runtime.

Use devm_pm_runtime_enable(), remove manual pm_runtime_disable()
invocations and move the pm_runtime handling in probe before
devm_mbox_controller_register().

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b30a047744ea4344bb6f854b0a052cf276349128`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < adcaa21d50c3a4c884f4d0b7a95fa3bd7a07cf84`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1f602619e408b6e9655ee76656a2a5ab6e89c5e4`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.