CVE-2026-64494
iio: light: gp2ap002: fix runtime PM leak on read error
Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.
INFO
Published Date :
July 25, 2026, 10:17 a.m.
Last Modified :
July 25, 2026, 10:17 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2026-64494
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Update the Linux kernel to the resolved version.
- Ensure pm_runtime_put_autosuspend is called on error paths.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-64494.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-64494 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-64494
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-64494 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-64494 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jul. 25, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': '62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5', 'versionType': 'git'}, {'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': '7110201c6b21455240c63388f30113f3baafacfc', 'versionType': 'git'}, {'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': '2593f0c6ea37df168975694a3b17e7086f11453e', 'versionType': 'git'}, {'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': 'f350883989ced96d6da7f582f9a6f9c6ffc94e34', 'versionType': 'git'}, {'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': '29137052c4485c74bc2d1b0717f69ca4de14274f', 'versionType': 'git'}, {'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': '0c655d067ac69ee24e2e9d706c54179ea58a43db', 'versionType': 'git'}, {'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': '2ebaea7f3089decb01a8294d89d7e0cf288146c4', 'versionType': 'git'}, {'status': 'affected', 'version': 'f6dbf83c17cb223ceabd7c42d441414f3e0e8a86', 'lessThan': '38b72267b7e22768a1f26d9935de4e1752a1dc85', 'versionType': 'git'}, {'status': 'affected', 'version': 'f3e84bf3f86bb3b7bd50666bb8ef7a203a656ca3', 'versionType': 'git'}, {'status': 'affected', 'version': '5.7.6', 'lessThan': '5.8', 'versionType': 'semver'}], 'programFiles': ['drivers/iio/light/gp2ap002.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.8'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.8', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.96', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.39', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.4', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc3', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/iio/light/gp2ap002.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path. Added Reference https://git.kernel.org/stable/c/0c655d067ac69ee24e2e9d706c54179ea58a43db Added Reference https://git.kernel.org/stable/c/2593f0c6ea37df168975694a3b17e7086f11453e Added Reference https://git.kernel.org/stable/c/29137052c4485c74bc2d1b0717f69ca4de14274f Added Reference https://git.kernel.org/stable/c/2ebaea7f3089decb01a8294d89d7e0cf288146c4 Added Reference https://git.kernel.org/stable/c/38b72267b7e22768a1f26d9935de4e1752a1dc85 Added Reference https://git.kernel.org/stable/c/62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5 Added Reference https://git.kernel.org/stable/c/7110201c6b21455240c63388f30113f3baafacfc Added Reference https://git.kernel.org/stable/c/f350883989ced96d6da7f582f9a6f9c6ffc94e34