CVE-2026-93143 PUBLISHED

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

Assigner: Linux
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

ipu7_resume() calls pm_runtime_get_sync() before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without dropping the reference.

Use pm_runtime_resume_and_get() instead, which balances the usage count on failure and avoids the leak. Keep returning 0 on error, as resume callbacks should not propagate failures to the PM core, matching the behaviour of the ipu6 driver.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to 593fda71983b9c23c84a566b20c53dc402c6b376 (excl.)
  • affected from b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to 437d6d15936db87485afabf7d52754b7b19cc787 (excl.)
  • affected from b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 to b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.17 is affected
  • unaffected from 0 to 6.17 (excl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References