CVE-2026-89935

In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending. Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-25)

Published

2026-09-16

Modified

2026-10-19

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/3ce75e455dd6eaa775fb0badb31c0b100c7a01fe
• https://git.kernel.org/stable/c/d378fceaafd79e0dc59d3546bda251a3058062c0
• https://git.kernel.org/stable/c/f3d97800b03cd39ec135e544dcd0a93ffd18e4c7

Check your stackJSON