U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-64494 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/0c655d067ac69ee24e2e9d706c54179ea58a43db kernel.org
https://git.kernel.org/stable/c/2593f0c6ea37df168975694a3b17e7086f11453e kernel.org
https://git.kernel.org/stable/c/29137052c4485c74bc2d1b0717f69ca4de14274f kernel.org
https://git.kernel.org/stable/c/2ebaea7f3089decb01a8294d89d7e0cf288146c4 kernel.org
https://git.kernel.org/stable/c/38b72267b7e22768a1f26d9935de4e1752a1dc85 kernel.org
https://git.kernel.org/stable/c/62e0d74821a02f0e0c5c79b99ae64dc83a9a90f5 kernel.org
https://git.kernel.org/stable/c/7110201c6b21455240c63388f30113f3baafacfc kernel.org
https://git.kernel.org/stable/c/f350883989ced96d6da7f582f9a6f9c6ffc94e34 kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-64494
NVD Published Date:
07/25/2026
NVD Last Modified:
07/25/2026
Source:
kernel.org