{"id":"CVE-2026-98529","summary":"gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()\n\nSwitching a persistent GPIO line from input to output acquires a\nruntime PM reference on the parent device, but if the subsequent\nregmap_update_bits() fails the reference is never dropped and no later\ndirection_in() can balance it since the direction was never changed.\nDrop the reference on the update failure path.","modified":"2026-10-19T02:46:27.402335519Z","published":"2026-10-18T15:17:47.577Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98529.json","cna_assigner":"Linux"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/39748357db26b20a02ea2a25ce48943e6c6d6286"},{"type":"WEB","url":"https://git.kernel.org/stable/c/40c010c1866382cb63ba7497d6ec74fcc60ab9cf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5c8e87f33b68557a725e72f34051299f55c6fa9e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/61ed58b745c1186006b8357da651abbb7a6bff17"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9d8d6cddcb7c0b8125f3a9e52492e929674009d8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9ee200f484983b0a178c593e57d2fe3e67061ee8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a9f738487c11fb512dadef097b56020239c21810"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e9d810279f84b30738f7790c0ed15f8dd5b9024a"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98529.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98529"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"27a49ed17e2245cacbdea88ad78b8494653e0338"},{"fixed":"40c010c1866382cb63ba7497d6ec74fcc60ab9cf"},{"fixed":"61ed58b745c1186006b8357da651abbb7a6bff17"},{"fixed":"5c8e87f33b68557a725e72f34051299f55c6fa9e"},{"fixed":"9d8d6cddcb7c0b8125f3a9e52492e929674009d8"},{"fixed":"9ee200f484983b0a178c593e57d2fe3e67061ee8"},{"fixed":"a9f738487c11fb512dadef097b56020239c21810"},{"fixed":"39748357db26b20a02ea2a25ce48943e6c6d6286"},{"fixed":"e9d810279f84b30738f7790c0ed15f8dd5b9024a"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98529.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.0"},{"fixed":"5.10.271"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.189"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.158"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.112"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.55"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.9"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98529.json"}}],"schema_version":"1.9.0"}