PT-2026-122026
CVE-2026-99049
·
Published
2026-10-23
·
Updated
2026-10-23
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
gpio: xilinx: fix runtime PM leak on request error path
pm runtime get sync() leaves the usage counter incremented even when it
fails, and xgpio request() returns the error without dropping it.
gpiolib does not call ->free() when ->request() fails, so xgpio free(),
which holds the only matching pm runtime put(), never runs. The reference
is leaked and the controller can no longer runtime-suspend, so its clock
stays enabled.
Switch to pm runtime resume and get(), which only increments the usage
counter on success.
Found an issue in the description? Have something to add? Feel free to write us 👾