Strix
64.1K

CVE-2026-89934

Unknown

Last modified

CVE-2026-89934 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference. This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read. Fix this by releasing the runtime PM reference before returning from the error path..

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference. This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read. Fix this by releasing the runtime PM reference before returning from the error path.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < c4f003d8578f5718fe1ec332bc89f9ff69fd205b; >= 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < 0614928a3eda35bddd8c2f02311e286b59bbe746; >= 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < 80e7381e8cccb543397572af153865f34aaf4353; >= 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < c132aef0e757a39036b1d40faf0569f2e343b13e
LinuxLinux6.1

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-89934?
In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference. This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read. Fix this by releasing the runtime PM reference before returning from the error path.
How severe is CVE-2026-89934?
Severity scoring for CVE-2026-89934 is pending analysis.
How do I fix CVE-2026-89934?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-89934?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST