CVE-2026-90406 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: handle runtime PM resume failure in core deinit

Check the return value of pm_runtime_resume_and_get() in
iris_core_deinit().

If runtime PM resume fails, skip hardware power-off operations but
still perform software teardown and state transition. Also skip the
corresponding pm_runtime_put_sync() call to avoid unbalanced runtime
PM references.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc
https://git.kernel.org/stable/c/cb83cfff8dff5d546fadce15596e01b1504b632a
https://git.kernel.org/stable/c/e7768f3dae9f2c6e5b80e9c02429550ea39f2be6

History

Thu, 17 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pm_runtime_resume_and_get() in iris_core_deinit(). If runtime PM resume fails, skip hardware power-off operations but still perform software teardown and state transition. Also skip the corresponding pm_runtime_put_sync() call to avoid unbalanced runtime PM references.
Title		media: qcom: iris: handle runtime PM resume failure in core deinit
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc https://git.kernel.org/stable/c/cb83cfff8dff5d546fadce15596e01b1504b632a https://git.kernel.org/stable/c/e7768f3dae9f2c6e5b80e9c02429550ea39f2be6

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-17T16:09:34.775Z

Updated: 2026-09-17T16:09:34.775Z

Reserved: 2026-09-11T19:38:34.812Z

Link: CVE-2026-90406

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-90406", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.812Z", "datePublished": "2026-09-17T16:09:34.775Z", "dateUpdated": "2026-09-17T16:09:34.775Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-17T16:09:34.775Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: qcom: iris: handle runtime PM resume failure in core deinit\n\nCheck the return value of pm_runtime_resume_and_get() in\niris_core_deinit().\n\nIf runtime PM resume fails, skip hardware power-off operations but\nstill perform software teardown and state transition. Also skip the\ncorresponding pm_runtime_put_sync() call to avoid unbalanced runtime\nPM references."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/qcom/iris/iris_core.c"], "versions": [{"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "lessThan": "e7768f3dae9f2c6e5b80e9c02429550ea39f2be6", "status": "affected", "versionType": "git"}, {"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "lessThan": "cb83cfff8dff5d546fadce15596e01b1504b632a", "status": "affected", "versionType": "git"}, {"version": "bb8a95aa038e099f5ec82c466e996b006e05abd7", "lessThan": "75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/qcom/iris/iris_core.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.52", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.6", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.52"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.2.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/e7768f3dae9f2c6e5b80e9c02429550ea39f2be6"}, {"url": "https://git.kernel.org/stable/c/cb83cfff8dff5d546fadce15596e01b1504b632a"}, {"url": "https://git.kernel.org/stable/c/75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc"}], "title": "media: qcom: iris: handle runtime PM resume failure in core deinit", "x_generator": {"engine": "bippy-1.2.0"}}}}