Bug 2468154 (CVE-2026-43357) - CVE-2026-43357 kernel: iio: gyro: mpu3050-core: fix pm_runtime error handling
Summary: CVE-2026-43357 kernel: iio: gyro: mpu3050-core: fix pm_runtime error handling
Keywords:
Status: NEW
Alias: CVE-2026-43357
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-08 15:02 UTC by OSIDB Bzimport
Modified: 2026-05-11 13:02 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-08 15:02:00 UTC
In the Linux kernel, the following vulnerability has been resolved:

iio: gyro: mpu3050-core: fix pm_runtime error handling

The return value of pm_runtime_get_sync() is not checked, allowing
the driver to access hardware that may fail to resume. The device
usage count is also unconditionally incremented. Use
pm_runtime_resume_and_get() which propagates errors and avoids
incrementing the usage count on failure.

In preenable, add pm_runtime_put_autosuspend() on set_8khz_samplerate()
failure since postdisable does not run when preenable fails.


Note You need to log in before you can comment on or make changes to this bug.