CVE-2026-64499

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-07-25 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes the device with pm_runtime_resume_and_get() before starting a conversion. If i2c_smbus_write_byte() fails, the function returns the error directly and leaves the runtime PM usage counter elevated. The matching postdisable callback is not called when preenable fails, so the reference is leaked and the device may remain runtime-active indefinitely. Store the I2C transfer result in ret and drop the runtime PM reference on failure before returning the error.

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.21%
Raw Score 0.002090
Percentile 11.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00209
2026-11-13
0.00209
2026-11-12
0.00209
2026-11-10
0.00209
2026-11-09
0.00209
2026-11-08
0.00209
2026-11-07
0.00209
2026-11-06
0.00209
2026-11-05
0.00209
2026-11-04
0.00209
2026-11-03
0.00209

Intelligence Sources

nvd ref →