{"id":"CVE-2026-64494","summary":"iio: light: gp2ap002: fix runtime PM leak on read error","details":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: gp2ap002: fix runtime PM leak on read error\n\ngp2ap002_read_raw() calls pm_runtime_get_sync() before reading the\nlux value, but if gp2ap002_get_lux() fails, it returns directly. This\nskips the pm_runtime_put_autosuspend() call at the \"out\" label,\npermanently leaking a runtime PM reference and preventing the device\nfrom autosuspending.\n\nReplace the direct return with a \"goto out\" to ensure the reference\nis properly dropped on the error path.","modified":"2026-11-05T02:31:01.523518105Z","published":"2026-07-25T08:51:51.747Z","related":["SUSE-SU-2026:23477-1","SUSE-SU-2026:23481-1","SUSE-SU-2026:23528-1","SUSE-SU-2026:23529-1","SUSE-SU-2026:23881-1","SUSE-SU-2026:23887-1","SUSE-SU-2026:23897-1","SUSE-SU-2026:23902-1","SUSE-SU-2026:4120-1","SUSE-SU-2026:4254-1","openSUSE-SU-2026:11476-1","openSUSE-SU-2026:21910-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64494.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0c655d067ac69ee24e2e9d706c54179ea58a43db"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2593f0c6ea37df168975694a3b17e7086f11453e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/29137052c4485c74bc2d1b0717f69ca4de14274f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2ebaea7f3089decb01a8294d89d7e0cf288146c4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/38b72267b7e22768a1f26d9935de4e1752a1dc85"},{"type":"WEB","url":"https://git.kernel.org/stable/c/62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7110201c6b21455240c63388f30113f3baafacfc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f350883989ced96d6da7f582f9a6f9c6ffc94e34"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64494.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64494"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f6dbf83c17cb223ceabd7c42d441414f3e0e8a86"},{"fixed":"62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5"},{"fixed":"7110201c6b21455240c63388f30113f3baafacfc"},{"fixed":"2593f0c6ea37df168975694a3b17e7086f11453e"},{"fixed":"f350883989ced96d6da7f582f9a6f9c6ffc94e34"},{"fixed":"29137052c4485c74bc2d1b0717f69ca4de14274f"},{"fixed":"0c655d067ac69ee24e2e9d706c54179ea58a43db"},{"fixed":"2ebaea7f3089decb01a8294d89d7e0cf288146c4"},{"fixed":"38b72267b7e22768a1f26d9935de4e1752a1dc85"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.7.6"},{"fixed":"5.8"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f3e84bf3f86bb3b7bd50666bb8ef7a203a656ca3"}]}],"versions":["v5.7.19","v5.7.18","v5.7.17","v5.7.16","v5.7.15","v5.7.14","v5.7.13","v5.7.12","v5.7.11","v5.7.10","v5.7.9","v5.7.8","v5.7.7","v5.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64494.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.0"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.96"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.39"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64494.json"}}],"schema_version":"1.9.2"}