Düşük
CVE-2026-99049: CVE-2026-99049: güvenlik açığı
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and xgpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so xgpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.
Özet bilgiler
- EPSS
- %0,17 (yüzdelik 7)
- Yama
- Yok / bilinmiyor