CVE-2026-89889: media: i2c: imx415: Release runtime PM reference on VBLANK error
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: imx415: Release runtime PM reference on VBLANK error
The VBLANK path returned immediately when programming VMAX failed after pmruntimegetifinuse() had taken a runtime PM reference. Break out of the switch instead so the common pmruntimeput() path is used.
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Systems using the Linux kernel imx415 media I2C driver are exposed when the VBLANK control path is exercised while the device is runtime-active.
What condition triggers the problem?
The issue occurs when programming VMAX fails after pm_runtime_get_if_in_use() has acquired a runtime PM reference. The error path returns without releasing that reference.
What is the impact of the flawed error path?
A runtime PM reference can be leaked, preventing the common pm_runtime_put() cleanup path from running for that operation.