CVE-2026-46239

media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl

published May 28, 2026

CVSS
—
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl

Three control cases (AUTOGAIN, EXPOSURE_AUTO, ANALOGUE_GAIN) directly

return without calling pm_runtime_put(), causing runtime PM reference

count leaks.

Change these cases from 'return' to 'ret = ... break' pattern to ensure

pm_runtime_put() is always called before function exit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Published
2026-05-28T09:41Z
EPSS history
Timeline
  • 28 MAY 09:41Z
    media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
    cvelistv5