CVE-2026-43301

media: chips-media: wave5: Fix PM runtime usage count underflow

published May 8, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Fix PM runtime usage count underflow

Replace pm_runtime_put_sync() with pm_runtime_dont_use_autosuspend() in

the remove path to properly pair with pm_runtime_use_autosuspend() from

probe. This allows pm_runtime_disable() to handle reference count cleanup

correctly regardless of current suspend state.

The driver calls pm_runtime_put_sync() unconditionally in remove, but the

device may already be suspended due to autosuspend configured in probe.

When autosuspend has already suspended the device, the usage count is 0,

and pm_runtime_put_sync() decrements it to -1.

This causes the following warning on module unload:

------------[ cut here ]------------

WARNING: CPU: 1 PID: 963 at kernel/kthread.c:1430

kthread_destroy_worker+0x84/0x98

...

vdec 30210000.video-codec: Runtime PM usage count underflow!

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-08T13:11Z
EPSS history
Timeline
  • 08 MAY 13:11Z
    media: chips-media: wave5: Fix PM runtime usage count underflow
    cvelistv5