PT-2026-39016 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-08 · CVE-2026-43355

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A power management (PM) runtime leak exists in the bh1780 light sensor driver. The issue occurs because the pm runtime put autosuspend() function is not called on the error path following a pm runtime get sync() call, preventing the PM runtime reference count from being decremented when a read operation fails.

Recommendations Move the pm runtime put autosuspend() function before the error check to ensure the reference count is always decremented.

Related Identifiers

CVE-2026-43355

Affected Products

Linux Kernel

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-43355 · Security Note
• https://git.kernel.org/stable/c/33661bfc85c14836bfef4425a74b0ca2df4bb5ad · Note
• https://git.kernel.org/stable/c/424bf90e87134effe4bd932608a15286493b11ab · Note
• https://twitter.com/CVEnew/status/2052811016321249435 · Twitter Post
• https://git.kernel.org/stable/c/aae572ddc28578af476cce7da3faec0395ef0bf0 · Note
• https://git.kernel.org/stable/c/1eb3af4f59e09323788860a9155e9766b12891e5 · Note
• https://git.kernel.org/stable/c/dd72e6c3cdea05cad24e99710939086f7a113fb5 · Note
• https://git.kernel.org/stable/c/fc77e0a5600e620a2ae51ec78933162fb217b20b · Note