OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64499

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of the Texas Instruments ADS1119 analog-to-digital converter, specifically in the `ads1119_triggered_buffer_preenable()` function, which improperly manages power management references. If an I2C write operation fails, the function fails to decrement the runtime PM usage counter, potentially leading to the device remaining active indefinitely and consuming resources unnecessarily. Organizations using affected Linux systems with the ADS1119 should prioritize addressing this issue to prevent potential resource exhaustion and ensure efficient power management.

CVE
CVE-2026-64499
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes the device with pm_runtime_resume_and_get() before starting a conversion. If i2c_smbus_write_byte() fails, the function returns the error directly and leaves the runtime PM usage counter elevated. The matching postdisable callback is not called when preenable fails, so the reference is leaked and the device may remain runtime-active indefinitely. Store the I2C transfer result in ret and drop the runtime PM reference on failure before returning the error.