CVE-2026-97407
Received Received - Intake

Runtime PM Resume Failure in Rockchip PDM Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt rockchip_pdm_set_fmt() calls pm_runtime_get_sync() before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function continues to perform register accesses while the device state is undefined. Replace pm_runtime_get_sync() with pm_runtime_resume_and_get() and return early on failure to avoid unpowered register accesses.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97407
EUVD
EUVD-2026-86220

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
rockchip rockchip_pdm *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's ASoC (ALSA System on Chip) driver for Rockchip PDM (Pulse Density Modulation). The function rockchip_pdm_set_fmt() fails to handle runtime power management (PM) resume failures properly. It calls pm_runtime_get_sync() to wake up the device but ignores the return value, which could indicate a failure. If the resume fails, the function proceeds to access hardware registers while the device is in an undefined state, potentially causing instability or crashes.

Detection Guidance

This vulnerability affects the Linux kernel's rockchip_pdm driver. Detection involves checking kernel logs for runtime PM resume failures in the rockchip_pdm module. Use commands like dmesg | grep -i 'rockchip_pdm' or journalctl -k | grep -i 'rockchip_pdm' to inspect logs for errors related to pm_runtime_get_sync failures.

Impact Analysis

This vulnerability could lead to system instability or crashes if the Rockchip PDM device fails to resume from a low-power state. Users might experience audio-related issues, such as distorted sound or complete audio failure, on systems using affected Rockchip hardware. It may also cause kernel errors or warnings in logs.

Mitigation Strategies

Apply the kernel patch that replaces pm_runtime_get_sync() with pm_runtime_resume_and_get() in the rockchip_pdm driver. Update to a patched kernel version where this issue is resolved. Monitor system logs for any runtime PM resume failures after applying the patch.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97407. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart