PT-2026-64724 · Linux · Linux

CVE-2026-64503 · Published 2026-07-25 · Updated 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: kxsd9: fix runtime PM imbalance on write raw() error

kxsd9 write raw() takes a runtime PM reference with pm runtime get sync() but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping the matching pm runtime put autosuspend(). This leaks a runtime PM usage-counter reference on every such write, after which the device can no longer autosuspend.

Set the error code and fall through to the existing put instead of returning early.

Related Identifiers

CVE-2026-64503

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-64503 · Security Note
• https://git.kernel.org/stable/c/a93fd69c1ab0854ac4f5b8439c26dfadb25dfd20 · Note
• https://git.kernel.org/stable/c/44a5fd874bb6873bdaec59f722c1d57832fbc9df · Note
• https://git.kernel.org/stable/c/eeece4a85ece6f3837c75ef26a9b2bf5a1d0fcfc · Note
• https://git.kernel.org/stable/c/223703d6e8bed50b6a0b47e160877909518d94b9 · Note
• https://git.kernel.org/stable/c/191fcfeb729ededd8dd2a999c6bf351ddfa0cec7 · Note
• https://git.kernel.org/stable/c/36154171385a8a2444a4b3c6eaa0c5294cb02478 · Note
• https://git.kernel.org/stable/c/13a91e8631cfeb68e5b7fd6687f194f5a86e83fe · Note
• https://git.kernel.org/stable/c/6293211d142605bec435229ef0aa3668b8964164 · Note