Not yet scoredPublished Oct 18, 2026

CVE-2026-98437media: qcom: iris: fix runtime PM reference leaks

Updated under an hour ago (Oct 27, 2026, 12:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pm_runtime_resume_and_get() in iris_enable_power_domains() to avoid leaking a runtime PM usage count on failure. Also ensure pm_runtime_put_sync() is always called in iris_disable_power_domains(), even when iris_opp_set_rate() fails, so runtime PM references remain balanced.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 18, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from bb8a95aa038e099f5ec82c466e996b006e05abd7 before fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before 7a52e76b63095e05d92f15f16f45421cab9789e1; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before f87d7eda07fca21efe4b96169ae59007db46e60e	CNA record

References

References

https://git.kernel.org/stable/c/fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795
https://git.kernel.org/stable/c/7a52e76b63095e05d92f15f16f45421cab9789e1
https://git.kernel.org/stable/c/f87d7eda07fca21efe4b96169ae59007db46e60e

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.