CVE-2026-43357 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050-core: fix pm_runtime error handling The return value of pm_runtime_get_sync() is not checked, allowing the driver to access hardware that may fail to resume. The device usage count is also unconditionally incremented. Use pm_runtime_resume_and_get() which propagates errors and avoids incrementing the usage count on failure. In preenable, add pm_runtime_put_autosuspend() on set_8khz_samplerate() failure since postdisable does not run when preenable fails.
A vulnerability has been identified in the Linux kernel's IIO gyroscope driver for the MPU-3050 sensor. The issue arises because the driver does not properly check the return value of the 'pm_runtime_get_sync()' function. This oversight can lead the driver to access hardware that may not have successfully resumed, potentially causing malfunctions. Additionally, the device's usage count is always incremented, regardless of whether the operation was successful. To address this, the driver should use 'pm_runtime_resume_and_get()', which correctly handles errors and prevents unnecessary increments of the usage count. The vulnerability affects several versions of the Linux kernel.
Users can update to the latest version of the Linux kernel, where this vulnerability has been addressed. Instructions for updating the kernel can be found in the official Linux documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2a86a396aa001a9f9ba2d37dda36573a76f17c90 | kernel.org | Patch |
| https://git.kernel.org/stable/c/35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677 | kernel.org | Patch |
| https://git.kernel.org/stable/c/42685cf96e28262e0b84d74447f3d99f3f6a72e0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/66c0d1d600e7be034959cf49edab104cb5a39258 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7a3dec5b265cf87678b10c98a72a435a8e769bb7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8544c488e50206f00630a8bbba43d2c8bd290345 | kernel.org | Patch |
| https://git.kernel.org/stable/c/935f57dd43492240e1ca220dd065d624efece6be | kernel.org | Patch |
| https://git.kernel.org/stable/c/acc3949aab3e8094641a9c7c2768de1958c88378 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.10, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.167 >= 6.2, < 6.6.130 >= 6.7, < 6.12.78 >= 6.13, < 6.18.19 >= 6.19, < 6.19.9 7.0 rc1 7.0 rc2 7.0 rc3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 15, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |