CVE-2026-98437

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98437", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.349Z", "datePublished": "2026-10-18T14:45:26.337Z", "dateUpdated": "2026-10-19T09:19:33.190Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:19:33.190Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: qcom: iris: fix runtime PM reference leaks\n\nUse pm_runtime_resume_and_get() in iris_enable_power_domains()\nto avoid leaking a runtime PM usage count on failure.\n\nAlso ensure pm_runtime_put_sync() is always called in\niris_disable_power_domains(), even when iris_opp_set_rate()\nfails, so runtime PM references remain balanced."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/qcom/iris/iris_resources.c"], "versions": [{"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "lessThan": "fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795", "status": "affected", "versionType": "git"}, {"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "lessThan": "7a52e76b63095e05d92f15f16f45421cab9789e1", "status": "affected", "versionType": "git"}, {"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "lessThan": "f87d7eda07fca21efe4b96169ae59007db46e60e", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/qcom/iris/iris_resources.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795"}, {"url": "https://git.kernel.org/stable/c/7a52e76b63095e05d92f15f16f45421cab9789e1"}, {"url": "https://git.kernel.org/stable/c/f87d7eda07fca21efe4b96169ae59007db46e60e"}], "title": "media: qcom: iris: fix runtime PM reference leaks", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/media/platform/qcom/iris/iris_resources.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795", "status": "affected", "version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "versionType": "git"}, {"lessThan": "7a52e76b63095e05d92f15f16f45421cab9789e1", "status": "affected", "version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "versionType": "git"}, {"lessThan": "f87d7eda07fca21efe4b96169ae59007db46e60e", "status": "affected", "version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/media/platform/qcom/iris/iris_resources.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"lessThan": "6.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: qcom: iris: fix runtime PM reference leaks\n\nUse pm_runtime_resume_and_get() in iris_enable_power_domains()\nto avoid leaking a runtime PM usage count on failure.\n\nAlso ensure pm_runtime_put_sync() is always called in\niris_disable_power_domains(), even when iris_opp_set_rate()\nfails, so runtime PM references remain balanced."}], "id": "CVE-2026-98437", "lastModified": "2026-10-19T10:18:51.853", "metrics": {}, "published": "2026-10-18T15:16:53.490", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7a52e76b63095e05d92f15f16f45421cab9789e1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f87d7eda07fca21efe4b96169ae59007db46e60e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: media: qcom: iris: fix runtime PM reference leaks", "id": "2554817", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554817"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-911", "details": ["A flaw was found in the Linux kernel's Qualcomm Iris video driver. A local user could cause a Denial of Service (DoS) or resource exhaustion through improper error handling during power domain configuration. When enabling or disabling power domains encounters an error, the driver fails to properly release runtime Power Management (PM) references, potentially preventing the device from entering low-power states and disrupting power management."], "name": "CVE-2026-98437", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98437\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98437\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98437.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[bb8a95aa038e099f5ec82c466e996b006e05abd7,fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[bb8a95aa038e099f5ec82c466e996b006e05abd7,7a52e76b63095e05d92f15f16f45421cab9789e1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[bb8a95aa038e099f5ec82c466e996b006e05abd7,f87d7eda07fca21efe4b96169ae59007db46e60e)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T16:30:13.920847+00:00", "updated": "2026-10-19T17:15:06.730431+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}