UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-98527

In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.

Properties

Last source
FIRST EPSS
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.0022
Cve id
CVE-2026-98527
First seen by Signal
2026-10-18T18:05:58+00:00
Retrieved at
2026-10-21T01:24:51+00:00
Published at
2026-10-18T16:17:04.183
Last modified
2026-10-19T10:19:07.990
Epss percentile
0.11703

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-98527 — Ninja Signal Threat Intelligence | Ninja Signal