CVE-2026-43357

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43357", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:56.005Z", "datePublished": "2026-05-08T14:21:13.050Z", "dateUpdated": "2026-05-11T22:23:00.799Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:23:00.799Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: mpu3050-core: fix pm_runtime error handling\n\nThe return value of pm_runtime_get_sync() is not checked, allowing\nthe driver to access hardware that may fail to resume. The device\nusage count is also unconditionally incremented. Use\npm_runtime_resume_and_get() which propagates errors and avoids\nincrementing the usage count on failure.\n\nIn preenable, add pm_runtime_put_autosuspend() on set_8khz_samplerate()\nfailure since postdisable does not run when preenable fails."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/gyro/mpu3050-core.c"], "versions": [{"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "935f57dd43492240e1ca220dd065d624efece6be", "status": "affected", "versionType": "git"}, {"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "8544c488e50206f00630a8bbba43d2c8bd290345", "status": "affected", "versionType": "git"}, {"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677", "status": "affected", "versionType": "git"}, {"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "2a86a396aa001a9f9ba2d37dda36573a76f17c90", "status": "affected", "versionType": "git"}, {"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "66c0d1d600e7be034959cf49edab104cb5a39258", "status": "affected", "versionType": "git"}, {"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "42685cf96e28262e0b84d74447f3d99f3f6a72e0", "status": "affected", "versionType": "git"}, {"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "7a3dec5b265cf87678b10c98a72a435a8e769bb7", "status": "affected", "versionType": "git"}, {"version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "lessThan": "acc3949aab3e8094641a9c7c2768de1958c88378", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/gyro/mpu3050-core.c"], "versions": [{"version": "4.10", "status": "affected"}, {"version": "0", "lessThan": "4.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.253", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.203", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.167", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.130", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.78", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.19", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.9", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "5.10.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "5.15.203"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.1.167"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.6.130"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.12.78"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.18.19"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.19.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/935f57dd43492240e1ca220dd065d624efece6be"}, {"url": "https://git.kernel.org/stable/c/8544c488e50206f00630a8bbba43d2c8bd290345"}, {"url": "https://git.kernel.org/stable/c/35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677"}, {"url": "https://git.kernel.org/stable/c/2a86a396aa001a9f9ba2d37dda36573a76f17c90"}, {"url": "https://git.kernel.org/stable/c/66c0d1d600e7be034959cf49edab104cb5a39258"}, {"url": "https://git.kernel.org/stable/c/42685cf96e28262e0b84d74447f3d99f3f6a72e0"}, {"url": "https://git.kernel.org/stable/c/7a3dec5b265cf87678b10c98a72a435a8e769bb7"}, {"url": "https://git.kernel.org/stable/c/acc3949aab3e8094641a9c7c2768de1958c88378"}], "title": "iio: gyro: mpu3050-core: fix pm_runtime error handling", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iio/gyro/mpu3050-core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "935f57dd43492240e1ca220dd065d624efece6be", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}, {"lessThan": "8544c488e50206f00630a8bbba43d2c8bd290345", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}, {"lessThan": "35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}, {"lessThan": "2a86a396aa001a9f9ba2d37dda36573a76f17c90", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}, {"lessThan": "66c0d1d600e7be034959cf49edab104cb5a39258", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}, {"lessThan": "42685cf96e28262e0b84d74447f3d99f3f6a72e0", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}, {"lessThan": "7a3dec5b265cf87678b10c98a72a435a8e769bb7", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}, {"lessThan": "acc3949aab3e8094641a9c7c2768de1958c88378", "status": "affected", "version": "3904b28efb2c780c23dcddfb87e07fe0230661e5", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iio/gyro/mpu3050-core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.10"}, {"lessThan": "4.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.253", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.203", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.167", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.130", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.78", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.19", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6295619F-1E94-4D58-A683-135EACD0504E", "versionEndExcluding": "5.10.253", "versionStartIncluding": "4.10", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DDB3E9-AABF-4107-ADB0-5362AA067045", "versionEndExcluding": "5.15.203", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2EDC6BAF-B710-4E26-B6AA-D68922EE7B43", "versionEndExcluding": "6.1.167", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C57BB918-DF28-46B3-94F7-144176841267", "versionEndExcluding": "6.6.130", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "28D591F5-B196-4CC9-905C-DC80F116E7A8", "versionEndExcluding": "6.12.78", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D394AC60-6F28-435F-872A-CCDF384B8331", "versionEndExcluding": "6.18.19", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E825E7C3-FEAC-4FD3-8A81-78D7387948C9", "versionEndExcluding": "6.19.9", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: mpu3050-core: fix pm_runtime error handling\n\nThe return value of pm_runtime_get_sync() is not checked, allowing\nthe driver to access hardware that may fail to resume. The device\nusage count is also unconditionally incremented. Use\npm_runtime_resume_and_get() which propagates errors and avoids\nincrementing the usage count on failure.\n\nIn preenable, add pm_runtime_put_autosuspend() on set_8khz_samplerate()\nfailure since postdisable does not run when preenable fails."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\niio: gyro: mpu3050-core: correcci\u00f3n del manejo de errores de pm_runtime\n\nEl valor de retorno de pm_runtime_get_sync() no se verifica, permitiendo que el controlador acceda a hardware que puede fallar al reanudar. El contador de uso del dispositivo tambi\u00e9n es incrementado incondicionalmente. Utilizar pm_runtime_resume_and_get() que propaga errores y evita incrementar el contador de uso en caso de fallo.\n\nEn preenable, a\u00f1adir pm_runtime_put_autosuspend() en caso de fallo de set_8khz_samplerate() ya que postdisable no se ejecuta cuando preenable falla."}], "id": "CVE-2026-43357", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-05-08T15:16:46.477", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2a86a396aa001a9f9ba2d37dda36573a76f17c90"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/42685cf96e28262e0b84d74447f3d99f3f6a72e0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/66c0d1d600e7be034959cf49edab104cb5a39258"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7a3dec5b265cf87678b10c98a72a435a8e769bb7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8544c488e50206f00630a8bbba43d2c8bd290345"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/935f57dd43492240e1ca220dd065d624efece6be"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/acc3949aab3e8094641a9c7c2768de1958c88378"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: iio: gyro: mpu3050-core: fix pm_runtime error handling", "id": "2468154", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468154"}, "csaw": false, "cwe": "CWE-390", "details": ["A flaw was found in the `iio: gyro: mpu3050-core` driver of the Linux kernel. Incorrect error handling in the power management runtime functions allows the driver to attempt accessing hardware that may have failed to resume. This can lead to an unconditionally incremented device usage count, potentially causing system instability or resource exhaustion."], "name": "CVE-2026-43357", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43357\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43357\nhttps://lore.kernel.org/linux-cve-announce/2026050824-CVE-2026-43357-4d3f@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,935f57dd43492240e1ca220dd065d624efece6be)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,8544c488e50206f00630a8bbba43d2c8bd290345)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,2a86a396aa001a9f9ba2d37dda36573a76f17c90)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,66c0d1d600e7be034959cf49edab104cb5a39258)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,42685cf96e28262e0b84d74447f3d99f3f6a72e0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,7a3dec5b265cf87678b10c98a72a435a8e769bb7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3904b28efb2c780c23dcddfb87e07fe0230661e5,acc3949aab3e8094641a9c7c2768de1958c88378)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.10"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,4.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.253,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.203,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.167,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.130,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.78,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.19,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.9,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-08T16:30:12.437385+00:00", "updated": "2026-05-15T18:15:05.634556+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}