CVE-2026-90249

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the gp2ap002 light sensor driver where the IIO core fails to filter duplicate writes to the event enable attribute. This causes the write event config() function to be invoked multiple times when the same value is written twice. Repeatedly enabling the event leaks a runtime Power Management (PM) reference, which prevents the device from suspending. Conversely, repeatedly disabling the event causes the usage count to underflow, triggering a Runtime PM usage count underflow warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.