ShellCodeX
Tools • Events • News • Insights
ShellCodeX vulnerability brief
UNASSESSED Received

CVE-2026-64499

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes the device with pm_runtime_resume_and_get() before starting a conversion. If i2c_smbus_write_byte() fails, the function returns the error directly and leaves the runtime PM usage counter elevated. The matching postdisable callback is not called when preenable fails, so the reference is leaked and the device may remain runtime-active indefinitely. Store the I2C transfer result in ret and drop the runtime PM reference on failure before returning the error.

Published 25 Jul 2026, 10:17 UTC Last modified 25 Jul 2026, 10:17 UTC
01

Attack profile

The conditions required to exploit this vulnerability and its potential impact.

Attack vector Not assessed
Attack complexity Not assessed
Privileges required Not assessed
User interaction Not assessed
Scope Not assessed
Confidentiality Not assessed
Integrity Not assessed
Availability Not assessed
02

Affected products

Product applicability statements supplied with the NVD record.

NVD has not published structured affected-product data for this record.
03

Weakness classification

CWE categories help security teams group the underlying software weakness.

Weakness classification is still awaiting analysis.
04

Source references

External advisories, patches and technical reports attached to this CVE record.