Unrated severityNVD Advisory· Published Sep 17, 2026· Updated Oct 19, 2026
CVE-2026-93143
CVE-2026-93143
Description
In the Linux kernel, the following vulnerability has been resolved:
staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()
ipu7_resume() calls pm_runtime_get_sync() before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without dropping the reference.
Use pm_runtime_resume_and_get() instead, which balances the usage count on failure and avoids the leak. Keep returning 0 on error, as resume callbacks should not propagate failures to the PM core, matching the behaviour of the ipu6 driver.
Affected products
3- osv-coords2 versions
>= 6.17.0, < 6.18.52+ 1 more
- (no CPE)range: >= 6.17.0, < 6.18.52
- (no CPE)range: < 7.2.8-1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.