CVE-2026-64171: i2c: tegra: fix pm_runtime leak on mutex_lock failure
In the Linux kernel, the following vulnerability has been resolved:
i2c: tegra: fix pmruntime leak on mutexlock failure
If tegrai2cmutexlock() fails, the function returns without calling pmruntimeput(), leaking the runtime PM reference acquired by the preceding pmruntimegetsync(). This prevents the device from ever entering runtime suspend.
Add the missing pmruntimeput() before returning on lock failure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the i2c tegra driver, ensure that if tegra_i2c_mutex_lock() fails, the code calls pm_runtime_put() (to release the runtime PM reference acquired by the preceding pm_runtime_get_sync()) before returning. This prevents a runtime PM reference leak that keeps the device from entering runtime suspend.
Linux kernel i2c tegra driver pm_runtime_put() missing on tegra_i2c_mutex_lock() failure path = Add call to pm_runtime_put() before returning when tegra_i2c_mutex_lock() fails
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64171?
CVE-2026-64171 has a risk rating of 12, indicating a critical severity level.
How do I fix CVE-2026-64171?
To fix CVE-2026-64171, update your Linux kernel to the latest version that contains the patch for this vulnerability.
What components are affected by CVE-2026-64171?
CVE-2026-64171 affects the i2c subsystem specifically concerning the Tegra implementations in the Linux kernel.
What type of vulnerability is CVE-2026-64171?
CVE-2026-64171 is a resource leak vulnerability that affects the proper management of runtime PM references.
Is CVE-2026-64171 exploitable remotely?
CVE-2026-64171 is not a remote exploit; it requires local access to the kernel and the affected code.