PT-2026-64715 · Linux · Linux

CVE-2026-64494 · Published 2026-07-25 · Updated 2026-07-25

NVD

In the Linux kernel, the following vulnerability has been resolved:

iio: light: gp2ap002: fix runtime PM leak on read error

gp2ap002 read raw() calls pm runtime get sync() before reading the lux value, but if gp2ap002 get lux() fails, it returns directly. This skips the pm runtime put autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending.

Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.

Related Identifiers

CVE-2026-64494

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-64494 · Security Note
• https://git.kernel.org/stable/c/62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5 · Note
• https://git.kernel.org/stable/c/7110201c6b21455240c63388f30113f3baafacfc · Note
• https://git.kernel.org/stable/c/2ebaea7f3089decb01a8294d89d7e0cf288146c4 · Note
• https://git.kernel.org/stable/c/2593f0c6ea37df168975694a3b17e7086f11453e · Note
• https://git.kernel.org/stable/c/0c655d067ac69ee24e2e9d706c54179ea58a43db · Note
• https://git.kernel.org/stable/c/f350883989ced96d6da7f582f9a6f9c6ffc94e34 · Note
• https://git.kernel.org/stable/c/29137052c4485c74bc2d1b0717f69ca4de14274f · Note
• https://git.kernel.org/stable/c/38b72267b7e22768a1f26d9935de4e1752a1dc85 · Note