Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-93143

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

Description

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() ipu7_resume() calls pm_runtime_get_sync() before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without dropping the reference. Use pm_runtime_resume_and_get() instead, which balances the usage count on failure and avoids the leak. Keep returning 0 on error, as resume callbacks should not propagate failures to the PM core, matching the behaviour of the ipu6 driver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to < 593fda71983b9c23c84a566b20c53dc402c6b376affected
  • b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to < 437d6d15936db87485afabf7d52754b7b19cc787affected
  • b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to < b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecfaffected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References