CVE-2026-89934

Source
https://cve.org/CVERecord?id=CVE-2026-89934
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89934.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89934
Downstream
Published
2026-09-16T10:32:24Z
Modified
2026-09-18T03:48:34Z
Summary
iio: light: ltrf216a: fix runtime PM reference leak in error path
Details

In the Linux kernel, the following vulnerability has been resolved:

iio: light: ltrf216a: fix runtime PM reference leak in error path

ltrf216a_get_lux() acquires a runtime PM reference by calling ltrf216a_set_power_state(data, true). However, if ltrf216a_read_data() fails, the function returns immediately without dropping the reference.

This leaves the runtime PM usage count unbalanced, preventing the device from autosuspending after a failed read.

Fix this by releasing the runtime PM reference before returning from the error path.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89934.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f
Fixed
c4f003d8578f5718fe1ec332bc89f9ff69fd205b
Fixed
0614928a3eda35bddd8c2f02311e286b59bbe746
Fixed
80e7381e8cccb543397572af153865f34aaf4353
Fixed
c132aef0e757a39036b1d40faf0569f2e343b13e

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89934.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89934.json"