What’s Vulnerable › Vulnerabilities

CVE-2023-53177: media: hi846: fix usage of pm_runtime_get_if_in_use()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-15 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: media: hi846: fix usage of pm_runtime_get_if_in_use() pm_runtime_get_if_in_use() does not only return nonzero values when the device is in use, it can return a negative errno too. And especially during resuming from system suspend, when runtime pm is not yet up again, -EAGAIN is being returned, so the subsequent pm_runtime_put() call results in a refcount underflow. Fix system-resume by handling -EAGAIN of pm_runtime_get_if_in_use().

Affected products

• Linux kernel: from 5.16 before 6.1.39; from 6.2 before 6.4.4 — fixed in 6.1.39, 6.4.4

How to fix

Upgrade to a fixed version: Linux kernel 6.1.39, 6.4.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/04fc06f6dc1592ed5d675311ac50d8fba5db62ab
• https://git.kernel.org/stable/c/42ec6269f98edd915ee37da3c6456bb6243ea56a
• https://git.kernel.org/stable/c/c5dcd7a19f1ed8fe98384f3a9444c7c53befd74e

Get alerted when CVE-2023-53177 or the next vulnerability affects your stack