AZL-110579: CVE-2026-98904 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
mailbox: imx: Use devmpmruntimeenable()
sashiko complained about early usage of the device while probe isn't completed. This can be mitigated by delaying the pmruntimeenable() into the removal path instead doing it early. This ensures that in an error case the device is removed (and imxmushutdown()) before pmruntimedisable() so we don't have to do this manually.
For the order to work, lets move devmmboxcontrollerregister() until after the pm-runtime part. So the reverse order will be mbox-controller removal followed by disabling pm runtime.
Use devmpmruntimeenable(), remove manual pmruntimedisable() invocations and move the pmruntime handling in probe before devmmboxcontrollerregister().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Use devm_pm_runtime_enable(), delay enabling runtime PM until after the pm-runtime portion of probe, and remove the manual pm_runtime_disable() call.
Linux kernel mailbox imx pm_runtime handling = Use devm_pm_runtime_enable() and delay pm_runtime_enable() until the appropriate point in probe