Medium severity5.5NVD Advisory· Published May 8, 2026· Updated May 15, 2026

CVE-2026-43355

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: light: bh1780: fix PM runtime leak on error path

Move pm_runtime_put_autosuspend() before the error check to ensure the PM runtime reference count is always decremented after pm_runtime_get_sync(), regardless of whether the read operation succeeds or fails.

Affected products

Linux/Kernel5 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.7,<5.10.253
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- (no CPE)
Linux/bh1780llm-create

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/1eb3af4f59e09323788860a9155e9766b12891e5nvdPatch
git.kernel.org/stable/c/33661bfc85c14836bfef4425a74b0ca2df4bb5adnvdPatch
git.kernel.org/stable/c/424bf90e87134effe4bd932608a15286493b11abnvdPatch
git.kernel.org/stable/c/aae572ddc28578af476cce7da3faec0395ef0bf0nvdPatch
git.kernel.org/stable/c/dd72e6c3cdea05cad24e99710939086f7a113fb5nvdPatch
git.kernel.org/stable/c/fc77e0a5600e620a2ae51ec78933162fb217b20bnvdPatch

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000