Arizona GPIO Runtime PM Leak in Linux Kernel

Executive Summary

This vulnerability in the Linux kernel involves a runtime power management (PM) leak in the arizona_gpio_direction_out() function. When switching a persistent GPIO line from input to output mode, the function acquires a runtime PM reference on the parent device. If a subsequent regmap_update_bits() operation fails, the reference is not released, preventing later direction_in() calls from balancing it since the direction was never properly changed.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to the Linux kernel's GPIO subsystem and cannot be detected via network scans. Check kernel logs for errors related to gpio arizona or runtime PM leaks. Use commands like dmesg | grep arizona or journalctl -k | grep arizona to inspect kernel logs for failures in GPIO direction changes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could lead to system instability or unexpected behavior due to unbalanced runtime PM references. It may cause power management issues, where devices fail to enter low-power states correctly, potentially reducing battery life on portable systems or causing performance degradation.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-98529. Monitor kernel updates from your distribution vendor and apply them promptly. No additional configuration changes are required beyond the kernel update.

Useful 0 Not Useful 0