CVE-2026-99089
Received Received - Intake

Runtime PM Clock Imbalance in Linux Kernel ASoC Samsung I2S

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM The probe function puts the device into the runtime PM active state with only the "iis" bus clock enabled, but it also sets priv->op_clk to the parent of the RCLK_SRC mux without enabling it. The runtime PM suspend callback disables both clocks, so the first runtime suspend after probe disables op_clk once more than it was enabled. On Exynos5250 Arndale both clocks resolve to the same EXYNOS_I2S_BUS gate, so this triggers the following warning during boot: WARNING: drivers/clk/clk.c:1270 at clk_core_disable+0xe4/0x23c, CPU#0: kworker/u8:3/45 i2s_bus already disabled ... Workqueue: pm pm_runtime_work Call trace: ... clk_core_disable from clk_disable+0x28/0x34 clk_disable from i2s_runtime_suspend+0x58/0x68 [snd_soc_i2s] i2s_runtime_suspend [snd_soc_i2s] from genpd_runtime_suspend+0xc4/0x298 genpd_runtime_suspend from __rpm_callback+0x48/0x18c __rpm_callback from rpm_callback+0x4c/0x50 rpm_callback from rpm_suspend+0xf4/0x718 rpm_suspend from pm_runtime_work+0x9c/0xa0 ... Fix this by enabling op_clk in probe right after getting it, so the clock state matches the runtime PM active state, and by disabling it in remove.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-99089
EUVD
EUVD-2026-109895

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
Linux Linux 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b
Linux Linux 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b
Linux Linux 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b
Linux Linux 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b
Linux Linux 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b
Linux Linux 4.17

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's ASoC subsystem for Samsung I2S devices. The probe function enables a clock but fails to balance it with runtime PM, causing an extra disable call. This leads to a warning about a clock being disabled twice during boot on certain hardware like Exynos5250 Arndale.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC Samsung I2S driver and may not have direct network detection methods. Check kernel logs for warnings like 'i2s_bus already disabled' during boot or runtime PM operations. Commands: dmesg | grep -i 'i2s_bus already disabled' or journalctl -k | grep -i 'i2s_bus already disabled'.

Impact Analysis

The impact is primarily on system stability during boot. It causes a warning message but does not directly affect functionality or security. Users may see error logs, but normal operation continues.

Mitigation Strategies

Apply the kernel patch that enables op_clk in the probe function and disables it in remove. Update to a kernel version containing the fix. If immediate patching is not possible, monitor for the warning in logs and avoid triggering runtime PM suspend for the I2S device until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-99089. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart