CVE-2026-43301: media: chips-media: wave5: Fix PM runtime usage count underflow
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Fix PM runtime usage count underflow
Replace pmruntimeputsync() with pmruntimedontuseautosuspend() in the remove path to properly pair with pmruntimeuseautosuspend() from probe. This allows pmruntimedisable() to handle reference count cleanup correctly regardless of current suspend state.
The driver calls pmruntimeputsync() unconditionally in remove, but the device may already be suspended due to autosuspend configured in probe. When autosuspend has already suspended the device, the usage count is 0, and pmruntimeputsync() decrements it to -1.
This causes the following warning on module unload:
------------[ cut here ]------------ WARNING: CPU: 1 PID: 963 at kernel/kthread.c:1430 kthreaddestroyworker+0x84/0x98 ... vdec 30210000.video-codec: Runtime PM usage count underflow!
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43301?
CVE-2026-43301 has a high severity rating due to its potential impact on power management in affected systems.
How do I fix CVE-2026-43301?
To fix CVE-2026-43301, replace pm_runtime_put_sync() with pm_runtime_dont_use_autosuspend() in the remove path of your implementation.
Which software is affected by CVE-2026-43301?
CVE-2026-43301 affects the Linux kernel specifically within the chips-media wave5 subsystem.
What type of vulnerability is CVE-2026-43301?
CVE-2026-43301 is a power management runtime usage count underflow vulnerability.
When was CVE-2026-43301 resolved?
CVE-2026-43301 was resolved in a recent update to the Linux kernel regarding the chips-media wave5 subsystem.