CVE-2026-64499

CVE-2026-64499

published July 25, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ti-ads1119: fix PM reference leak in buffer preenable

ads1119_triggered_buffer_preenable() resumes the device with

pm_runtime_resume_and_get() before starting a conversion.

If i2c_smbus_write_byte() fails, the function returns the error directly

and leaves the runtime PM usage counter elevated. The matching

postdisable callback is not called when preenable fails, so the reference

is leaked and the device may remain runtime-active indefinitely.

Store the I2C transfer result in ret and drop the runtime PM reference on

failure before returning the error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-07-25T14:17Z
References (4)
EPSS history
Timeline
  • 25 JUL 08:51Z
    iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
    cvelistv5