What’s Vulnerable › Vulnerabilities

CVE-2026-97407: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt rockchip_pdm_set_fmt() calls pm_runtime_get_sync() before accessing hardware registers, but ignores its return value. If the runtime resume fails, the function continues to perform register accesses while the device state is undefined. Replace pm_runtime_get_sync() with pm_runtime_resume_and_get() and return early on failure to avoid unpowered register accesses.

Affected products

• Linux kernel: from 4.14.118 before 4.15; from 4.19.42 before 4.20; from 5.0.15 before 5.1; 5.1 — fixed in 4.15, 4.20, 5.1, 7.2

How to fix

Upgrade to a fixed version: Linux kernel 4.15, 4.20, 5.1, 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/105ea8b7a29b473cbe3aa1e542997700c98e3adc
• https://git.kernel.org/stable/c/52b77346cf66174ab9bc34504729cd686a9e29b1
• https://git.kernel.org/stable/c/7f0fd754c708785c31b067dd98649e3ec9b8fd72
• https://git.kernel.org/stable/c/a9cc27a4a9b5fe013e152841fd8408061fa2312f
• https://git.kernel.org/stable/c/aa48db0257ed4cdb52f922d32872dcc8d201925e
• https://git.kernel.org/stable/c/b2b5c2ca5a4924271fa86d75a252de32fa285375
• https://git.kernel.org/stable/c/ee7b5f7b39332febf917f9ebf212842cc9379815

Get alerted when CVE-2026-97407 or the next vulnerability affects your stack