CVE-2026-64499: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
ads1119triggeredbufferpreenable() resumes the device with pmruntimeresumeandget() before starting a conversion.
If i2csmbuswritebyte() fails, the function returns the error directly and leaves the runtime PM usage counter elevated. The matching postdisable callback is not called when preenable fails, so the reference is leaked and the device may remain runtime-active indefinitely.
Store the I2C transfer result in ret and drop the runtime PM reference on failure before returning the error.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (iio: adc: ti-ads1119)to a version that resolves this vulnerability.Patch iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64499?
CVE-2026-64499 is assigned a severity risk of 15.
How do I fix CVE-2026-64499?
To fix CVE-2026-64499, update your Linux kernel to the latest version that addresses the PM reference leak issue.
What systems are affected by CVE-2026-64499?
CVE-2026-64499 affects devices utilizing the Linux kernel with the ti-ads1119 ADC driver.
What are the potential impacts of CVE-2026-64499?
The potential impact of CVE-2026-64499 includes improper power management leading to resource leaks.
When was CVE-2026-64499 published?
CVE-2026-64499 was published on July 25, 2026.