CVE-2026-90406

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: handle runtime PM resume failure in core deinit

Check the return value of pm_runtime_resume_and_get() in iris_core_deinit().

If runtime PM resume fails, skip hardware power-off operations but still perform software teardown and state transition. Also skip the corresponding pm_runtime_put_sync() call to avoid unbalanced runtime PM references.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= bb8a95aa038e099f5ec82c466e996b006e05abd7, < e7768f3dae9f2c6e5b80e9c02429550ea39f2be6; >= bb8a95aa038e099f5ec82c466e996b006e05abd7, < cb83cfff8dff5d546fadce15596e01b1504b632a; >= bb8a95aa038e099f5ec82c466e996b006e05abd7, < 75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc
LinuxLinux6.15

References

Timeline

Published
Sep 17, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-904077.7In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_evenCVE-2026-904087.7In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_evenCVE-2026-90409In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Add vm_bind region with kbo range overlap check When a VMCVE-2026-90410In the Linux kernel, the following vulnerability has been resolved: spi: davinci: switch to managed controller allocation The controller iCVE-2026-90411In the Linux kernel, the following vulnerability has been resolved: nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request __CVE-2026-90412In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_eCVE-2026-904139.1In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than was received iserCVE-2026-904149.1In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isert_recvCVE-2026-90415In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: free STAG index when TPT entry write fails write_tpt_entryCVE-2026-90416In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs get_paramCVE-2026-90417In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() WhCVE-2026-90418In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch Sy
CVE-2026-90406: Unscored | Vulnix