CVE-2026-98527

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98527
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98527.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98527
Downstream
Published
2026-10-18T15:17:45Z
Modified
2026-10-19T02:46:31Z
Summary
gpio: zynq: fix runtime PM leak on request error path
Details

In the Linux kernel, the following vulnerability has been resolved:

gpio: zynq: fix runtime PM leak on request error path

pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it.

gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled.

Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98527.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52
Fixed
e380fba02908b809f5bbef371259003cf5887bb4
Fixed
a3e9b7f7c9558f8c9592f8f817557bff98707bb3
Fixed
60a76cdd92e25f576dc58d756a565760dde1f7a1
Fixed
25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac
Fixed
6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e
Fixed
58a417a19d80141fff3abe6004e2e47285506e73
Fixed
6e20dabffbcd7b222d8e7bb85a7d8e8325df7699
Fixed
e9438ab5328a177c9c0e5df87eb92a7162841e98

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98527.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.17.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98527.json"