OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64494

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of the gp2ap002 light sensor driver, where a failure in reading the lux value leads to a runtime power management reference leak. This oversight prevents the device from entering autosuspend mode, potentially resulting in increased power consumption. Linux system administrators and developers utilizing this driver should prioritize applying the fix to mitigate unnecessary resource usage and ensure efficient power management.

CVE
CVE-2026-64494
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.