CVE-2026-64171
Received Received - Intake

Runtime PM Leak in NVIDIA Tegra I2C Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function returns without calling pm_runtime_put(), leaking the runtime PM reference acquired by the preceding pm_runtime_get_sync(). This prevents the device from ever entering runtime suspend. Add the missing pm_runtime_put() before returning on lock failure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64171
EUVD
EUVD-2026-45856

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's i2c tegra driver. When a mutex lock fails, the function returns without releasing a runtime PM reference, causing a leak. This prevents the device from entering low-power suspend mode.

Detection Guidance

This vulnerability is specific to the Linux kernel's i2c tegra driver and may not have direct network detection methods. Check kernel logs for errors related to i2c tegra or pm_runtime failures using commands like dmesg | grep -i tegra or journalctl -k | grep -i tegra.

Impact Analysis

The impact is limited to systems using the affected Linux kernel i2c tegra driver. It may cause increased power consumption due to the device failing to suspend properly.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a runtime PM reference leak in the Linux kernel's i2c tegra driver, which could prevent a device from entering low-power states but does not impact data protection or privacy controls required by these regulations.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch the vulnerability. Monitor system logs for pm_runtime or i2c tegra errors and ensure runtime PM is functioning correctly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64171. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart