CVE-2026-43355 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pm_runtime_put_autosuspend() before the error check to ensure the PM runtime reference count is always decremented after pm_runtime_get_sync(), regardless of whether the read operation succeeds or fails.
A vulnerability exists in the Linux kernel's IIO light driver for the ROHM BH1780 sensor, related to improper management of the power management (PM) runtime reference count. The issue arises because the PM runtime reference is not consistently decremented after being incremented, particularly when an error occurs during the execution of the read operation. This oversight can lead to a PM runtime reference leak, potentially causing performance issues or resource mismanagement.
The vulnerability has been addressed by modifying the driver to move the PM runtime reference decrement operation before the error check. This change ensures that the reference count is properly managed, regardless of whether the read operation succeeds or fails.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.7, < 5.10.253 >= 5.11, < 6.1.167 >= 6.2, < 6.6.130 >= 6.7, < 6.18.19 >= 6.19, < 6.19.9 7.0 rc1 7.0 rc2 7.0 rc3 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 4, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 15, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |