What’s Vulnerable › Vulnerabilities

CVE-2026-64499: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-25 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes the device with pm_runtime_resume_and_get() before starting a conversion. If i2c_smbus_write_byte() fails, the function returns the error directly and leaves the runtime PM usage counter elevated. The matching postdisable callback is not called when preenable fails, so the reference is leaked and the device may remain runtime-active indefinitely. Store the I2C transfer result in ret and drop the runtime PM reference on failure before returning the error.

Affected products

• Linux kernel: 6.11 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/6537f08100189d12bec4975000244e6ac4873c28
• https://git.kernel.org/stable/c/adf4bc07f814da8329278d32600147f5a150938c
• https://git.kernel.org/stable/c/f40292fb19399a3c3f82de698023ba87c01e66cf
• https://git.kernel.org/stable/c/ffb2195921c3d629194b9807de589578df9f9cb8

Get alerted when CVE-2026-64499 or the next vulnerability affects your stack