CVE-2026-43355

EUVD-2026-28661
In the Linux kernel, the following vulnerability has been resolved:

iio: light: bh1780: fix PM runtime leak on error path

Move pm_runtime_put_autosuspend() before the error check to ensure
the PM runtime reference count is always decremented after
pm_runtime_get_sync(), regardless of whether the read operation
succeeds or fails.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
4.7 ≤
𝑥
< 5.10.253
linuxlinux_kernel
5.11 ≤
𝑥
< 6.1.167
linuxlinux_kernel
6.2 ≤
𝑥
< 6.6.130
linuxlinux_kernel
6.7 ≤
𝑥
< 6.18.19
linuxlinux_kernel
6.19 ≤
𝑥
< 6.19.9
linuxlinux_kernel
7.0:rc1
linuxlinux_kernel
7.0:rc2
linuxlinux_kernel
7.0:rc3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.170-3
fixed
bookworm (security)
6.1.174-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.257-1
fixed
forky
7.0.12-2
fixed
sid
7.0.13-1
fixed
trixie
vulnerable
trixie (security)
vulnerable
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://git.kernel.org/stable/c/1eb3af4f59e09323788860a9155e9766b12891e5
https://git.kernel.org/stable/c/33661bfc85c14836bfef4425a74b0ca2df4bb5ad
https://git.kernel.org/stable/c/424bf90e87134effe4bd932608a15286493b11ab
https://git.kernel.org/stable/c/aae572ddc28578af476cce7da3faec0395ef0bf0
https://git.kernel.org/stable/c/dd72e6c3cdea05cad24e99710939086f7a113fb5
https://git.kernel.org/stable/c/fc77e0a5600e620a2ae51ec78933162fb217b20b