CVE-2026-64499
Received Received - Intake

Runtime PM Reference Leak in TI ADS1119 ADC Driver

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes the device with pm_runtime_resume_and_get() before starting a conversion. If i2c_smbus_write_byte() fails, the function returns the error directly and leaves the runtime PM usage counter elevated. The matching postdisable callback is not called when preenable fails, so the reference is leaked and the device may remain runtime-active indefinitely. Store the I2C transfer result in ret and drop the runtime PM reference on failure before returning the error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-08-14
AI Q&A
2026-07-25
EPSS Evaluated
2026-08-13
NVD
CVE-2026-64499
EUVD
EUVD-2026-48843

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's IIO ADC driver for the TI ADS1119 device. It involves a power management reference leak during buffer preenable operations. When the device is resumed for a conversion and an I2C write fails, the runtime PM usage counter is not decremented, causing the device to remain active indefinitely.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO ADC driver for TI ADS1119. Detection requires checking the kernel version and verifying if the affected driver is loaded. Use commands like uname -a to check kernel version and lsmod | grep ads1119 to see if the driver is loaded.

Impact Analysis

This could lead to increased power consumption and potential system instability if the device remains active unintentionally. It may also cause unexpected behavior in applications relying on proper power management of the ADS1119 device.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a runtime PM reference leak in the Linux kernel's IIO ADC driver, which could lead to increased power consumption but does not involve data exposure or privacy risks.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If updating is not immediately possible, consider disabling the ads1119 driver module if it is not in use to prevent potential exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64499. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart