gpio: zynq: fix runtime PM leak on request error path

Summary

In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.

Timeline

1. Oct 18, 2026, 3:17 PM UTCCVE published
2. Oct 19, 2026, 9:21 AM UTCRecord last updated

Affected versions

• Linux Linux

  From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in e380fba02908b809f5bbef371259003cf5887bb4; From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in a3e9b7f7c9558f8c9592f8f817557bff98707bb3; From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in 60a76cdd92e25f576dc58d756a565760dde1f7a1; From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in 25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac; From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in 6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e; From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in 58a417a19d80141fff3abe6004e2e47285506e73; From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in 6e20dabffbcd7b222d8e7bb85a7d8e8325df7699; From 3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 · fixed in e9438ab5328a177c9c0e5df87eb92a7162841e98

• Linux Linux

  3.17

• KernelLinux

  From 3.17.0 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.55; From 6.19.0 · fixed in 7.2.9

References 8