CVE-2026-89935

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resume_and_get() but several error paths return directly without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference and preventing the device from autosuspending. Use PM_RUNTIME_ACQUIRE_AUTOSUSPEND() and PM_RUNTIME_ACQUIRE_ERR() to automatically handle runtime PM reference release on all return paths.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 16, 2026
First seenSep 16, 2026

How to fix

Update
  • Linux Linuxf3d97800b03cd39ec135e544dcd0a93ffd18e4c7, 3ce75e455dd6eaa775fb0badb31c0b100c7a01fe, d378fceaafd79e0dc59d3546bda251a3058062c0 or later

Affected products

ProductAffected versionsFixed in
Linux Linux620d1e6c7a3fcc54c641f091e07b9040f13def19 ≤ v < f3d97800b03cd39ec135e544dcd0a93ffd18e4c7, 620d1e6c7a3fcc54c641f091e07b9040f13def19 ≤ v < 3ce75e455dd6eaa775fb0badb31c0b100c7a01fe, 620d1e6c7a3fcc54c641f091e07b9040f13def19 ≤ v < d378fceaafd79e0dc59d3546bda251a3058062c0, 6.10f3d97800b03cd39ec135e544dcd0a93ffd18e4c7, 3ce75e455dd6eaa775fb0badb31c0b100c7a01fe, d378fceaafd79e0dc59d3546bda251a3058062c0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-89935 · Linux · Dark Radar