CVE-2026-64494 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.
A vulnerability in the Linux kernel's handling of the GP2AP002 light sensor can lead to a runtime power management leak. The issue arises in the 'gp2ap002_read_raw' function, which calls 'pm_runtime_get_sync' to increase the power management reference before reading the light intensity (lux) value. However, if the 'gp2ap002_get_lux' function fails, the routine exits prematurely, bypassing the necessary 'pm_runtime_put_autosuspend' call. This oversight causes a permanent leak of the power management reference, preventing the device from entering an autosuspended state. The vulnerability affects the Linux kernel's stable branch.
The vulnerability has been addressed by modifying the 'gp2ap002_read_raw' function to replace the direct return statement with a 'goto out' directive. This change ensures that the power management reference is properly released even when an error occurs while reading the lux value.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |