CVE-2026-93143: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() ipu7_resume() calls pm_runtime_get_sync() before resuming the device. If the runtime PM resume fails, the usage count remains incremented, but the error path returns without dropping the reference. Use pm_runtime_resume_and_get() instead, which balances the usage count on failure and avoids the leak. Keep returning 0 on error, as resume callbacks should not propagate failures to the PM core, matching the behaviour of the ipu6 driver.

Засегнати продукти

• Linux Linux: b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 преди 593fda71983b9c23c84a566b20c53dc402c6b376; b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 преди 437d6d15936db87485afabf7d52754b7b19cc787; b7fe4c0019b12d60ece3e99eeb0ccfd5a1d103e5 преди b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf
• Linux Linux: 6.17; преди 6.17; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-93143
• https://nvd.nist.gov/vuln/detail/CVE-2026-93143
• https://git.kernel.org/stable/c/593fda71983b9c23c84a566b20c53dc402c6b376
• https://git.kernel.org/stable/c/437d6d15936db87485afabf7d52754b7b19cc787
• https://git.kernel.org/stable/c/b298b80814dd0fc3cb1c8c0e0082fc14fdb5fecf