> CVE-2026-93143

« BACK_TO_HOME
PUBLISHED
2026-09-17 17:18
MODIFIED
2026-09-17 17:18
EPSS (Prob. Exploit)
0.21%
Top 90.0%
DATA SOURCES:
NVD 🔗 2026-09-17 FIRST EPSS 🔗 2026-10-18 OSV 🔗 2026-10-19 MSRC 🔗 2026-10-22

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() ipu7_resume() calls pm_runtime_get_sync() before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without dropping the reference. Use pm_runtime_resume_and_get() instead, which balances the usage count on failure and avoids the leak. Keep returning 0 on error, as resume callbacks should not propagate failures to the PM core, matching the behaviour of the ipu6 driver.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
17/09/2026 17:18
Source: NVD
Total des modifications: 0 Dernière mise à jour: 1 month ago

> REFERENCES

https://git.kernel.org/stable/c/437d6d15936db87485afabf7d52754b7b19cc787
https://git.kernel.org/stable/c/593fda71983b9c23c84a566b20c53dc402c6b376
https://git.kernel.org/stable/c/b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf
« BACK_TO_HOME