{"id":"CVE-2026-99049","published":"2026-10-23T13:17:28.403","lastModified":"2026-10-23T13:17:28.403","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: xilinx: fix runtime PM leak on request error path\n\npm_runtime_get_sync() leaves the usage counter incremented even when it\nfails, and xgpio_request() returns the error without dropping it.\n\ngpiolib does not call ->free() when ->request() fails, so xgpio_free(),\nwhich holds the only matching pm_runtime_put(), never runs. The reference\nis leaked and the controller can no longer runtime-suspend, so its clock\nstays enabled.\n\nSwitch to pm_runtime_resume_and_get(), which only increments the usage\ncounter on success.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/2fd6ecda5d1f47cffcfadddb35ee49402162c724","tags":[]},{"url":"https://git.kernel.org/stable/c/a027e0d7765d1531ee39e4dae81951b04f32ba7b","tags":[]},{"url":"https://git.kernel.org/stable/c/b07b3925f676640103b3d74b93fc401b1c873d13","tags":[]},{"url":"https://git.kernel.org/stable/c/f73ee2bd2293f8cc340061c5229395ace71fc2eb","tags":[]},{"url":"https://git.kernel.org/stable/c/ff82fc3a4a1d417dee1229681cc5285986edb1fa","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}