iio: light: apds9306: fix PM reference leak in apds9306_read_data()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.18.52, 7.2.5
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending. Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 620d1e6c7a3fcc54c641f091e07b9040f13def19 · fixed in f3d97800b03cd39ec135e544dcd0a93ffd18e4c7; From 620d1e6c7a3fcc54c641f091e07b9040f13def19 · fixed in 3ce75e455dd6eaa775fb0badb31c0b100c7a01fe; From 620d1e6c7a3fcc54c641f091e07b9040f13def19 · fixed in d378fceaafd79e0dc59d3546bda251a3058062c0
- Linux Linux
6.10
- KernelLinux
From 6.10.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.5