CVE-2026-43301 Details
Description
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime usage count underflow Replace pm_runtime_put_sync() with pm_runtime_dont_use_autosuspend() in the remove path to properly pair with pm_runtime_use_autosuspend() from probe. This allows pm_runtime_disable() to handle reference count cleanup correctly regardless of current suspend state. The driver calls pm_runtime_put_sync() unconditionally in remove, but the device may already be suspended due to autosuspend configured in probe. When autosuspend has already suspended the device, the usage count is 0, and pm_runtime_put_sync() decrements it to -1. This causes the following warning on module unload: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 963 at kernel/kthread.c:1430 kthread_destroy_worker+0x84/0x98 ... vdec 30210000.video-codec: Runtime PM usage count underflow!
A vulnerability in the Linux kernel's chips-media wave5 driver has been addressed, concerning improper management of power management (PM) runtime usage counts. The issue arose because the driver called 'pm_runtime_put_sync()' unconditionally during the removal of a device, without accounting for the possibility that the device had already been suspended by an earlier autosuspend feature. This mismanagement led to a runtime PM usage count underflow, triggering a warning during module unloading. The vulnerability affected the Linux kernel stable tree.
The vulnerability has been fixed by replacing 'pm_runtime_put_sync()' with 'pm_runtime_dont_use_autosuspend()' in the driver's remove function. This change ensures that the PM runtime reference count is managed correctly, regardless of the device's suspend state.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0bffda02317989f8d5cdc2d4462a4110b1290cf0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3a278a55ead50db2444c8f01410c7f5a68723990 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-191 | Integer Underflow (Wrap or Wraparound) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 15, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |