Medium 5.5Published Jul 19, 2026

CVE-2026-64171i2c: tegra: fix pm_runtime leak on mutex_lock failure

Updated under an hour ago (Oct 27, 2026, 11:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function returns without calling pm_runtime_put(), leaking the runtime PM reference acquired by the preceding pm_runtime_get_sync(). This prevents the device from ever entering runtime suspend. Add the missing pm_runtime_put() before returning on lock failure.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jul 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	6077cfd716fbd4d1f2a3702e49ae8bf65c072685 builds before 8f7ed203b39004c02479a9156089d87d1ac2c1d8; 6077cfd716fbd4d1f2a3702e49ae8bf65c072685 builds before 57cf4e8d6a57dc2ef5810f4852a23ba4c71b74bb	CNA record
linux linux_kernel linux:linux_kernel	from 7.0 before 7.0.11; 7.1; 7.1; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/8f7ed203b39004c02479a9156089d87d1ac2c1d8	patch
https://git.kernel.org/stable/c/57cf4e8d6a57dc2ef5810f4852a23ba4c71b74bb	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.