SECURITY ANNOUNCEMENT

CVE-2026-99049

23 October 2026

which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock Switch to pm_runtime_resume_and_get(), which only increments the usage

Introduced

5.1226b04774621ed333e8bc56479feb6e31625df58c

Fixed releases

6.12.113f73ee2bd2293f8cc340061c5229395ace71fc2eb

6.18.57a027e0d7765d1531ee39e4dae81951b04f32ba7b

6.6.160b07b3925f676640103b3d74b93fc401b1c873d13

7.2.112fd6ecda5d1f47cffcfadddb35ee49402162c724

7.3ff82fc3a4a1d417dee1229681cc5285986edb1fa

View source announcement ↗