CVE-2026-64493

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64493", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T15:36:31.792Z", "datePublished": "2026-07-25T08:51:51.036Z", "dateUpdated": "2026-08-17T04:56:41.512Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T04:56:41.512Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: mpl115: fix runtime PM leak on read error\n\nmpl115_read_raw() takes a runtime PM reference with pm_runtime_get_sync()\nbefore reading the processed pressure or raw temperature, but on the read\nerror path it returns without calling pm_runtime_put_autosuspend(). Each\nfailed read therefore leaks a runtime PM reference and prevents the device\nfrom autosuspending.\n\nDrop the reference before checking the return value so both the success\nand error paths are balanced."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/pressure/mpl115.c"], "versions": [{"version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "lessThan": "5022f4ed5aae974ec530e3cbf0bd223be13055f7", "status": "affected", "versionType": "git"}, {"version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "lessThan": "aab0fed636b14a5fd52fcae58b484f1cb96b841d", "status": "affected", "versionType": "git"}, {"version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "lessThan": "b3f1af4ba8e9cf33aa08c4cdcaa5a17b140521ec", "status": "affected", "versionType": "git"}, {"version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "lessThan": "46e69d3dd429b33e50e2731913239f6af4ea2705", "status": "affected", "versionType": "git"}, {"version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "lessThan": "fbe67ff37a6fd855a6c097f84f3738bd13d0a898", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/pressure/mpl115.c"], "versions": [{"version": "6.2", "status": "affected"}, {"version": "0", "lessThan": "6.2", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.39", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.4", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "6.18.39"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "7.1.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5022f4ed5aae974ec530e3cbf0bd223be13055f7"}, {"url": "https://git.kernel.org/stable/c/aab0fed636b14a5fd52fcae58b484f1cb96b841d"}, {"url": "https://git.kernel.org/stable/c/b3f1af4ba8e9cf33aa08c4cdcaa5a17b140521ec"}, {"url": "https://git.kernel.org/stable/c/46e69d3dd429b33e50e2731913239f6af4ea2705"}, {"url": "https://git.kernel.org/stable/c/fbe67ff37a6fd855a6c097f84f3738bd13d0a898"}], "title": "iio: pressure: mpl115: fix runtime PM leak on read error", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iio/pressure/mpl115.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "5022f4ed5aae974ec530e3cbf0bd223be13055f7", "status": "affected", "version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "versionType": "git"}, {"lessThan": "aab0fed636b14a5fd52fcae58b484f1cb96b841d", "status": "affected", "version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "versionType": "git"}, {"lessThan": "b3f1af4ba8e9cf33aa08c4cdcaa5a17b140521ec", "status": "affected", "version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "versionType": "git"}, {"lessThan": "46e69d3dd429b33e50e2731913239f6af4ea2705", "status": "affected", "version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "versionType": "git"}, {"lessThan": "fbe67ff37a6fd855a6c097f84f3738bd13d0a898", "status": "affected", "version": "0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iio/pressure/mpl115.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.2"}, {"lessThan": "6.2", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.39", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: mpl115: fix runtime PM leak on read error\n\nmpl115_read_raw() takes a runtime PM reference with pm_runtime_get_sync()\nbefore reading the processed pressure or raw temperature, but on the read\nerror path it returns without calling pm_runtime_put_autosuspend(). Each\nfailed read therefore leaks a runtime PM reference and prevents the device\nfrom autosuspending.\n\nDrop the reference before checking the return value so both the success\nand error paths are balanced."}], "id": "CVE-2026-64493", "lastModified": "2026-11-03T18:15:39.353", "metrics": {}, "published": "2026-07-25T10:17:35.120", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/46e69d3dd429b33e50e2731913239f6af4ea2705"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5022f4ed5aae974ec530e3cbf0bd223be13055f7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aab0fed636b14a5fd52fcae58b484f1cb96b841d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b3f1af4ba8e9cf33aa08c4cdcaa5a17b140521ec"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fbe67ff37a6fd855a6c097f84f3738bd13d0a898"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}

{"bugzilla": {"description": "kernel: iio: pressure: mpl115: fix runtime PM leak on read error", "id": "2507245", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507245"}, "csaw": false, "cwe": "CWE-772", "details": ["A flaw was found in the Linux kernel's `mpl115` pressure sensor driver. When a read error occurs in the `mpl115_read_raw()` function, the driver fails to properly release a Power Management (PM) reference. This oversight leads to a continuous leak of PM references with each failed read. The accumulation of these unreleased references can prevent the affected device from entering an autosuspend state, potentially leading to increased power consumption or other resource management issues."], "name": "CVE-2026-64493", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64493\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64493\nhttps://lore.kernel.org/linux-cve-announce/2026072550-CVE-2026-64493-6e13@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a,5022f4ed5aae974ec530e3cbf0bd223be13055f7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a,aab0fed636b14a5fd52fcae58b484f1cb96b841d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a,b3f1af4ba8e9cf33aa08c4cdcaa5a17b140521ec)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a,46e69d3dd429b33e50e2731913239f6af4ea2705)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0c3a333524a3e5ba4b6c7b2638faef8420cfdb2a,fbe67ff37a6fd855a6c097f84f3738bd13d0a898)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.145,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.97,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.39,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.4,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-25T21:00:13.513909+00:00", "updated": "2026-08-02T12:30:05.798866+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}