Bug 2536532 (CVE-2026-93143) - CVE-2026-93143 kernel: staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()
Summary: CVE-2026-93143 kernel: staging: media: ipu7: fix pm_runtime refcount leak in ...
Keywords:
Status: NEW
Alias: CVE-2026-93143
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-17 18:19 UTC by OSIDB Bzimport
Modified: 2026-10-20 11:43 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-17 18:19:11 UTC
In the Linux kernel, the following vulnerability has been resolved:

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

ipu7_resume() calls pm_runtime_get_sync() before resuming the device.
If the runtime PM resume fails, the usage count remains incremented, but
the error path returns without dropping the reference.

Use pm_runtime_resume_and_get() instead, which balances the usage count
on failure and avoids the leak. Keep returning 0 on error, as resume
callbacks should not propagate failures to the PM core, matching the
behaviour of the ipu6 driver.


Note You need to log in before you can comment on or make changes to this bug.