OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64493

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's implementation of the mpl115 pressure sensor driver, specifically in the `mpl115_read_raw()` function, which improperly handles runtime power management references during read errors. This oversight can lead to a runtime PM reference leak, preventing the device from entering autosuspend mode, potentially resulting in increased power consumption. Organizations utilizing affected Linux systems, especially those relying on the mpl115 sensor, should prioritize addressing this issue to optimize power management and system efficiency.

CVE
CVE-2026-64493
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115_read_raw() takes a runtime PM reference with pm_runtime_get_sync() before reading the processed pressure or raw temperature, but on the read error path it returns without calling pm_runtime_put_autosuspend(). Each failed read therefore leaks a runtime PM reference and prevents the device from autosuspending. Drop the reference before checking the return value so both the success and error paths are balanced.