CVE-2026-90406

A flaw was found in the Linux kernel's media: qcom: iris driver. This vulnerability occurs when the iriscoredeinit function fails to properly handle a runtime Power Management PM resume failure. An attacker could potentially exploit this by triggering a scenario where the pmruntimeresumeandget...

Linux Distros Unpatched Vulnerability : CVE-2026-98437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also...

CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

UBUNTU-CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

SUSE CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

DEBIAN-CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437 media: qcom: iris: fix runtime PM reference leaks

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437 media: qcom: iris: fix runtime PM reference leaks

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437

The Linux kernel contains a vulnerability in the media: qcom: iris driver where runtime PM reference leaks occur. The issue stems from a failure to balance runtime PM usage counts during specific operations. Specifically, the iris_enable_power_domains() function requires the use of pm_runtime_res...

EUVD-2026-103676

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

Linux Distros Unpatched Vulnerability : CVE-2026-90406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails...

DEBIAN-CVE-2026-90406

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...

SUSE CVE-2026-89869

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disableirq during power-off The IRQ is registered as a threaded IRQ. Using disableirqnosync in irisvpupoweroff does not wait for an already queued threaded IRQ handler to complete before returning. As a...

CVE-2026-90406 media: qcom: iris: handle runtime PM resume failure in core deinit

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...

CVE-2026-90406 media: qcom: iris: handle runtime PM resume failure in core deinit

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...

CVE-2026-90406

CVE-2026-90406 affects the Linux kernel 's qcom iris media driver . The vulnerability resides in iris_core_deinit(), where the return value of pm_runtime_resume_and_get() was not checked. If the runtime PM resume fails, the driver would proceed with hardware power-off operations and call pm_runti...

CVE-2026-90406: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...