Strix
73K

CVE-2026-98527

Unknown

Last modified

CVE-2026-98527 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success..

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < e380fba02908b809f5bbef371259003cf5887bb4; >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < a3e9b7f7c9558f8c9592f8f817557bff98707bb3; >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < 60a76cdd92e25f576dc58d756a565760dde1f7a1; >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < 25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac; >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < 6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e; >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < 58a417a19d80141fff3abe6004e2e47285506e73; >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < 6e20dabffbcd7b222d8e7bb85a7d8e8325df7699; >= 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52, < e9438ab5328a177c9c0e5df87eb92a7162841e98
LinuxLinux3.17

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98527?
In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.
How severe is CVE-2026-98527?
Severity scoring for CVE-2026-98527 is pending analysis.
How do I fix CVE-2026-98527?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98527?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST