CVE-2026-64171: i2c: tegra: fix pm_runtime leak on mutex_lock failure
In the Linux kernel, the following vulnerability has been resolved:
i2c: tegra: fix pmruntime leak on mutexlock failure
If tegrai2cmutexlock() fails, the function returns without calling pmruntimeput(), leaking the runtime PM reference acquired by the preceding pmruntimegetsync(). This prevents the device from ever entering runtime suspend.
Add the missing pmruntimeput() before returning on lock failure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the i2c tegra driver, if tegra_i2c_mutex_lock() fails, ensure pm_runtime_put() is called before returning to avoid leaking the runtime PM reference acquired by pm_runtime_get_sync().
Linux kernel (i2c: tegra) pm_runtime_put() on tegra_i2c_mutex_lock() failure path = Add missing call before returning on mutex lock failure
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64171?
CVE-2026-64171 has a risk rating of 12, indicating a critical severity level.
How do I fix CVE-2026-64171?
To fix CVE-2026-64171, update your Linux kernel to the latest version that contains the patch for this vulnerability.
What components are affected by CVE-2026-64171?
CVE-2026-64171 affects the i2c subsystem specifically concerning the Tegra implementations in the Linux kernel.
What type of vulnerability is CVE-2026-64171?
CVE-2026-64171 is a resource leak vulnerability that affects the proper management of runtime PM references.
Is CVE-2026-64171 exploitable remotely?
CVE-2026-64171 is not a remote exploit; it requires local access to the kernel and the affected code.