5.5

CVE-2026-43355

iio: light: bh1780: fix PM runtime leak on error path

In the Linux kernel, the following vulnerability has been resolved:

iio: light: bh1780: fix PM runtime leak on error path

Move pm_runtime_put_autosuspend() before the error check to ensure
the PM runtime reference count is always decremented after
pm_runtime_get_sync(), regardless of whether the read operation
succeeds or fails.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.7 < 5.10.253
Linux ≫ Linux Kernel Version >= 5.11 < 6.1.167
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.130
Linux ≫ Linux Kernel Version >= 6.7 < 6.18.19
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.9
Linux ≫ Linux Kernel Version7.0 Updaterc1
Linux ≫ Linux Kernel Version7.0 Updaterc2
Linux ≫ Linux Kernel Version7.0 Updaterc3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.024
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/1eb3af4f59e09323788860a9155e9766b12891e5
Patch
https://git.kernel.org/stable/c/424bf90e87134effe4bd932608a15286493b11ab
Patch
https://git.kernel.org/stable/c/fc77e0a5600e620a2ae51ec78933162fb217b20b
Patch
https://git.kernel.org/stable/c/aae572ddc28578af476cce7da3faec0395ef0bf0
Patch
https://git.kernel.org/stable/c/33661bfc85c14836bfef4425a74b0ca2df4bb5ad
Patch
https://git.kernel.org/stable/c/dd72e6c3cdea05cad24e99710939086f7a113fb5
Patch
https://git.kernel.org/stable/c/4228f7f053b452be625919ccbb605912bae0dc98
https://git.kernel.org/stable/c/ad58fa1cb11e4ceb702786a494352c7ff2eca1ed