CVE-2026-72260

Source
https://cve.org/CVERecord?id=CVE-2026-72260
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72260.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72260
Downstream
Published
2026-08-15T05:54:48.409Z
Modified
2026-08-18T03:31:14.679460712Z
Summary
ASoC: mediatek: mt8192: Check runtime resume during probe
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8192: Check runtime resume during probe

The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pmruntimegetsync() without checking the return value. If runtime resume fails, probe keeps going without the device necessarily being accessible, and pmruntimegetsync() may leave the PM usage count incremented.

The regmapreinitcache() failure path also returns before dropping the temporary PM reference and before clearing pmruntimebypassregctl.

Use pmruntimeresumeandget() so resume failures do not leak a usage count, and clear the temporary bypass flag after dropping the probe PM reference on all regmapreinitcache() outcomes.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72260.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
125ab5d588b0b3b842064c4d53a666ca74521ae8
Fixed
6e2ee6eacc3ec7b339753abcf33812d27e03efe5
Fixed
faa97a1a6cab01cd3e2055deb4db4e57efc43ff2
Fixed
e0f276f1918a202e9c3ac72baffd311cecb6b8db
Fixed
f6e424835cc05d215c57b6370b2c1e353dd02915
Fixed
e24d5dde56a50946020b134fa8448869093db76a

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72260.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
6.6.148
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.101
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72260.json"