Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending. Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.
References
- https://git.kernel.org/stable/c/3ce75e455dd6eaa775fb0badb31c0b100c7a01fe
- https://git.kernel.org/stable/c/d378fceaafd79e0dc59d3546bda251a3058062c0
- https://git.kernel.org/stable/c/f3d97800b03cd39ec135e544dcd0a93ffd18e4c7
FAQ
What is CVE-2026-89935?
CVE-2026-89935 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resume_and_get() but sev...
How severe is CVE-2026-89935?
CVSS scoring is not yet available for CVE-2026-89935. Check NVD for updates.
Is there a patch for CVE-2026-89935?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.