BaseFortify

Publication date: 2026-09-16

Last updated on: 2026-09-16

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending. Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-16

Last Modified

2026-09-16

Generated

2026-10-06

EPSS Evaluated

2026-10-05

NVD

CVE-2026-89935

EUVD

EUVD-2026-80535

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	620d1e6c7a3fcc54c641f091e07b9040f13def19
Linux	Linux	620d1e6c7a3fcc54c641f091e07b9040f13def19
Linux	Linux	620d1e6c7a3fcc54c641f091e07b9040f13def19
Linux	Linux	6.10

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-89935. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70