CVE-2026-99049
gpio: xilinx: fix runtime PM leak on request error path
Fetching some sources has been requested. Reload in about a minute to see them.
Description
In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and xgpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so xgpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: 26b04774621ed333e8bc56479feb6e31625df58c … < b07b3925f676640103b3d74b93fc401b1c873d13 affected: 26b04774621ed333e8bc56479feb6e31625df58c … < f73ee2bd2293f8cc340061c5229395ace71fc2eb affected: 26b04774621ed333e8bc56479feb6e31625df58c … < a027e0d7765d1531ee39e4dae81951b04f32ba7b affected: 26b04774621ed333e8bc56479feb6e31625df58c … < 2fd6ecda5d1f47cffcfadddb35ee49402162c724 affected: 26b04774621ed333e8bc56479feb6e31625df58c … < ff82fc3a4a1d417dee1229681cc5285986edb1fa default: unaffected |
| Linux | Linux | affected: 5.12 unaffected: 0 … < 5.12 unaffected: 6.6.160 … <= 6.6.* unaffected: 6.12.113 … <= 6.12.* unaffected: 6.18.57 … <= 6.18.* unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
gpio: xilinx: fix runtime PM leak on request error path
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= 26b04774621ed333e8bc56479feb6e31625df58c, < b07b3925f676640103b3d74b93fc401b1c873d13; < f73ee2bd2293f8cc340061c5229395ace71fc2eb; < a027e0d7765d1531ee39e4dae81951b04f32ba7b; < 2fd6ecda5d1f47cffcfadddb35ee49402162c724; < ff82fc3a4a1d417dee1229681cc5285986edb1fa | b07b3925f676640103b3d74b93fc401b1c873d13, f73ee2bd2293f8cc340061c5229395ace71fc2eb, a027e0d7765d1531ee39e4dae81951b04f32ba7b, 2fd6ecda5d1f47cffcfadddb35ee49402162c724, ff82fc3a4a1d417dee1229681cc5285986edb1fa | ||
| Linux | Kernel | >= 5.12.0, < 6.6.160; >= 6.7.0, < 6.12.113; >= 6.13.0, < 6.18.57; >= 6.19.0, < 7.2.11 | 6.6.160, 6.12.113, 6.18.57, 7.2.11 |
Linux distribution status
References (8)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/2fd6ecda5d1f47cffcfadddb35ee49402162c724 NVD, CNA, OSV
- https://git.kernel.org/stable/c/a027e0d7765d1531ee39e4dae81951b04f32ba7b NVD, CNA, OSV
- https://git.kernel.org/stable/c/b07b3925f676640103b3d74b93fc401b1c873d13 NVD, CNA, OSV
- https://git.kernel.org/stable/c/f73ee2bd2293f8cc340061c5229395ace71fc2eb NVD, CNA, OSV
- https://git.kernel.org/stable/c/ff82fc3a4a1d417dee1229681cc5285986edb1fa NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99049.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-99049 OSV