Bug 2502545 (CVE-2026-64171)

Summary:	CVE-2026-64171 kernel: i2c: tegra: fix pm_runtime leak on mutex_lock failure
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	rhel-process-autobot, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's i2c Tegra module. This vulnerability occurs when a mutex lock fails, leading to a power management (PM) runtime reference leak. This leak prevents the affected device from entering runtime suspend, which can lead to increased power consumption or other resource exhaustion issues. This issue could impact system stability and efficiency.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-07-19 17:05:21 UTC

In the Linux kernel, the following vulnerability has been resolved:

i2c: tegra: fix pm_runtime leak on mutex_lock failure

If tegra_i2c_mutex_lock() fails, the function returns without calling
pm_runtime_put(), leaking the runtime PM reference acquired by the
preceding pm_runtime_get_sync(). This prevents the device from ever
entering runtime suspend.

Add the missing pm_runtime_put() before returning on lock failure.

Comment 1 TEJ RATHI 2026-07-20 14:11:15 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026071936-CVE-2026-64171-5160@gregkh/T