CVE-2026-89934

CVE-2026-89934

published September 16, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: light: ltrf216a: fix runtime PM reference leak in error path

ltrf216a_get_lux() acquires a runtime PM reference by calling

ltrf216a_set_power_state(data, true). However, if

ltrf216a_read_data() fails, the function returns immediately without

dropping the reference.

This leaves the runtime PM usage count unbalanced, preventing the device

from autosuspending after a failed read.

Fix this by releasing the runtime PM reference before returning from the

error path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-09-16T15:17Z
References (5)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:32Z
    iio: light: ltrf216a: fix runtime PM reference leak in error path
    cvelistv5