CVE-2026-64493
Received Received - Intake

Runtime PM Leak in Linux Kernel IIO MPL115 Driver

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115_read_raw() takes a runtime PM reference with pm_runtime_get_sync() before reading the processed pressure or raw temperature, but on the read error path it returns without calling pm_runtime_put_autosuspend(). Each failed read therefore leaks a runtime PM reference and prevents the device from autosuspending. Drop the reference before checking the return value so both the success and error paths are balanced.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-08-14
AI Q&A
2026-07-25
EPSS Evaluated
2026-08-13
NVD
CVE-2026-64493
EUVD
EUVD-2026-48837

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel iio pressure

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability affecting the mpl115 pressure sensor driver. It causes a runtime power management (PM) reference leak when read operations fail. The driver fails to release a PM reference after an error, preventing the device from entering low-power mode.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO pressure sensor driver (mpl115). Detection requires checking kernel logs for runtime PM reference leaks related to the mpl115 device. Use commands like dmesg | grep mpl115 or journalctl -k | grep mpl115 to identify errors. If the device fails to autosuspend after read errors, it may indicate the leak.

Impact Analysis

The vulnerability may cause increased power consumption on devices using the mpl115 pressure sensor. This could lead to reduced battery life in portable or embedded systems. The device may remain active unnecessarily due to the leaked PM reference.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it relates to a runtime PM leak in the Linux kernel's IIO pressure sensor driver. Compliance impacts would depend on specific system configurations and use cases rather than this technical flaw.

Mitigation Strategies

Update your Linux kernel to a patched version where this issue is resolved. If immediate patching is not possible, monitor the mpl115 device for runtime PM leaks and avoid prolonged read errors. Restarting the affected service or system may temporarily clear leaked references.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64493. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart