0.0
NA
CVE-2026-72260
ASoC: mediatek: mt8192: Check runtime resume during probe
Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pm_runtime_get_sync() without checking the return value. If runtime resume fails, probe keeps going without the device necessarily being accessible, and pm_runtime_get_sync() may leave the PM usage count incremented. The regmap_reinit_cache() failure path also returns before dropping the temporary PM reference and before clearing pm_runtime_bypass_reg_ctl. Use pm_runtime_resume_and_get() so resume failures do not leak a usage count, and clear the temporary bypass flag after dropping the probe PM reference on all regmap_reinit_cache() outcomes.

INFO

Published Date :

Aug. 15, 2026, 6:21 a.m.

Last Modified :

Aug. 17, 2026, 6:18 a.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-72260 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
Solution
Address runtime resume checks and PM reference leaks in ASoC driver.
  • Use pm_runtime_resume_and_get for resume checks.
  • Clear bypass flag after dropping PM reference.
  • Handle regmap_reinit_cache failure paths correctly.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-72260 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-72260 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-72260 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-72260 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 17, 2026

    Action Type Old Value New Value
    Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': '6e2ee6eacc3ec7b339753abcf33812d27e03efe5', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'faa97a1a6cab01cd3e2055deb4db4e57efc43ff2', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'e0f276f1918a202e9c3ac72baffd311cecb6b8db', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'f6e424835cc05d215c57b6370b2c1e353dd02915', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'e24d5dde56a50946020b134fa8448869093db76a', 'versionType': 'git'}], 'programFiles': ['sound/soc/mediatek/mt8192/mt8192-afe-pcm.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.11'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.11', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['sound/soc/mediatek/mt8192/mt8192-afe-pcm.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': '6e2ee6eacc3ec7b339753abcf33812d27e03efe5', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'faa97a1a6cab01cd3e2055deb4db4e57efc43ff2', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'e0f276f1918a202e9c3ac72baffd311cecb6b8db', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'f6e424835cc05d215c57b6370b2c1e353dd02915', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'e24d5dde56a50946020b134fa8448869093db76a', 'versionType': 'git'}], 'programFiles': ['sound/soc/mediatek/mt8192/mt8192-afe-pcm.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.11'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.11', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['sound/soc/mediatek/mt8192/mt8192-afe-pcm.c'], 'defaultStatus': 'affected'}]
  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Aug. 15, 2026

    Action Type Old Value New Value
    Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': '6e2ee6eacc3ec7b339753abcf33812d27e03efe5', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'faa97a1a6cab01cd3e2055deb4db4e57efc43ff2', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'e0f276f1918a202e9c3ac72baffd311cecb6b8db', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'f6e424835cc05d215c57b6370b2c1e353dd02915', 'versionType': 'git'}, {'status': 'affected', 'version': '125ab5d588b0b3b842064c4d53a666ca74521ae8', 'lessThan': 'e24d5dde56a50946020b134fa8448869093db76a', 'versionType': 'git'}], 'programFiles': ['sound/soc/mediatek/mt8192/mt8192-afe-pcm.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.11'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.11', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['sound/soc/mediatek/mt8192/mt8192-afe-pcm.c'], 'defaultStatus': 'affected'}]
    Added Description In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pm_runtime_get_sync() without checking the return value. If runtime resume fails, probe keeps going without the device necessarily being accessible, and pm_runtime_get_sync() may leave the PM usage count incremented. The regmap_reinit_cache() failure path also returns before dropping the temporary PM reference and before clearing pm_runtime_bypass_reg_ctl. Use pm_runtime_resume_and_get() so resume failures do not leak a usage count, and clear the temporary bypass flag after dropping the probe PM reference on all regmap_reinit_cache() outcomes.
    Added Reference https://git.kernel.org/stable/c/6e2ee6eacc3ec7b339753abcf33812d27e03efe5
    Added Reference https://git.kernel.org/stable/c/e0f276f1918a202e9c3ac72baffd311cecb6b8db
    Added Reference https://git.kernel.org/stable/c/e24d5dde56a50946020b134fa8448869093db76a
    Added Reference https://git.kernel.org/stable/c/f6e424835cc05d215c57b6370b2c1e353dd02915
    Added Reference https://git.kernel.org/stable/c/faa97a1a6cab01cd3e2055deb4db4e57efc43ff2
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.