HomeDefectsLIN1025-25859
Acknowledged

LIN1025-25859 : Security Advisory - linux - CVE-2026-99049

Created: Oct 23, 2026    Updated: Oct 27, 2026
Resolved Date: Oct 23, 2026
Found In Version: 10.25.33.2
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  gpio: xilinx: fix runtime PM leak on request error path  pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and xgpio_request() returns the error without dropping it.  gpiolib does not call ->free() when ->request() fails, so xgpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled.  Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.