Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes the device with pm_runtime_resume_and_get() before starting a conversion. If i2c_smbus_write_byte() fails, the function returns the error directly and leaves the runtime PM usage counter elevated. The matching postdisable callback is not called when preenable fails, so the reference is leaked and the device may remain runtime-active indefinitely. Store the I2C transfer result in ret and drop the runtime PM reference on failure before returning the error.
References
- https://git.kernel.org/stable/c/6537f08100189d12bec4975000244e6ac4873c28
- https://git.kernel.org/stable/c/adf4bc07f814da8329278d32600147f5a150938c
- https://git.kernel.org/stable/c/f40292fb19399a3c3f82de698023ba87c01e66cf
- https://git.kernel.org/stable/c/ffb2195921c3d629194b9807de589578df9f9cb8
FAQ
What is CVE-2026-64499?
CVE-2026-64499 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes the device with pm_ru...
How severe is CVE-2026-64499?
CVSS scoring is not yet available for CVE-2026-64499. Check NVD for updates.
Is there a patch for CVE-2026-64499?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.