In the Linux kernel, the following vulnerability has been resolved:

iio: light: ltrf216a: fix runtime PM reference leak in error path

ltrf216a_get_lux() acquires a runtime PM reference by calling
ltrf216a_set_power_state(data, true). However, if
ltrf216a_read_data() fails, the function returns immediately without
dropping the reference.

This leaves the runtime PM usage count unbalanced, preventing the device
from autosuspending after a failed read.

Fix this by releasing the runtime PM reference before returning from the
error path.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f affected < c4f003d8578f5718fe1ec332bc89f9ff69fd205b
83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f affected < 0614928a3eda35bddd8c2f02311e286b59bbe746
83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f affected < 80e7381e8cccb543397572af153865f34aaf4353
83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f affected < c132aef0e757a39036b1d40faf0569f2e343b13e
Linux Linux affected
Version Status Constraints
6.1 affected —
0 unaffected < 6.1
6.12.110 unaffected ≤ 6.12.*
6.18.51 unaffected ≤ 6.18.*
7.2.5 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0614928a3eda35bddd8c2f02311e286b59bbe746 cve-icon cve-icon
https://git.kernel.org/stable/c/80e7381e8cccb543397572af153865f34aaf4353 cve-icon cve-icon
https://git.kernel.org/stable/c/c132aef0e757a39036b1d40faf0569f2e343b13e cve-icon cve-icon
https://git.kernel.org/stable/c/c4f003d8578f5718fe1ec332bc89f9ff69fd205b cve-icon cve-icon
History

Wed, 16 Sep 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference. This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read. Fix this by releasing the runtime PM reference before returning from the error path.
Title iio: light: ltrf216a: fix runtime PM reference leak in error path
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-16T10:32:24.240Z

Reserved: 2026-09-11T19:38:34.776Z

Link: CVE-2026-89934

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-16T11:17:02.800

Modified: 2026-09-16T11:17:02.800

Link: CVE-2026-89934

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.