CVE-2026-98437: media: qcom: iris: fix runtime PM reference leaks
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
media: qcom: iris: fix runtime PM reference leaks
Use pmruntimeresumeandget() in irisenablepowerdomains() to avoid leaking a runtime PM usage count on failure.
Also ensure pmruntimeputsync() is always called in irisdisablepowerdomains(), even when irisoppsetrate() fails, so runtime PM references remain balanced.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Qualcomm Iris driver, use pm_runtime_resume_and_get() in iris_enable_power_domains(), and ensure pm_runtime_put_sync() is always called in iris_disable_power_domains(), including when iris_opp_set_rate() fails, so runtime PM references remain balanced.
Event History
Oct 18, 2026
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
Description
Data Sourced
via NVD·03:16 PM
Description