CVE-2026-89935 PUBLISHED

iio: light: apds9306: fix PM reference leak in apds9306_read_data()

Assigner: Linux
Reserved: 11.09.2026 Published: 16.09.2026 Updated: 16.09.2026

In the Linux kernel, the following vulnerability has been resolved:

iio: light: apds9306: fix PM reference leak in apds9306_read_data()

apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending.

Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 620d1e6c7a3fcc54c641f091e07b9040f13def19 to f3d97800b03cd39ec135e544dcd0a93ffd18e4c7 (excl.)
  • affected from 620d1e6c7a3fcc54c641f091e07b9040f13def19 to 3ce75e455dd6eaa775fb0badb31c0b100c7a01fe (excl.)
  • affected from 620d1e6c7a3fcc54c641f091e07b9040f13def19 to d378fceaafd79e0dc59d3546bda251a3058062c0 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.10 is affected
  • unaffected from 0 to 6.10 (excl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.5 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References