---
cve: "CVE-2026-64499"
severity: "LOW"
cvss: 3.1
epss: "16%"
vendor: "Linux"
kev: false
exploited: false
published: "2026-07-25 10:17:35"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-13T14:08:15+02:00"
---

# CVE-2026-64499

> 3.1 LOW

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ti-ads1119: fix PM reference leak in buffer preenable

ads1119_triggered_buffer_preenable() resumes the device with
pm_runtime_resume_and_get() before starting a conversion.

If i2c_smbus_write_byte() fails, the function returns the error directly
and leaves the runtime PM usage counter elevated. The matching
postdisable callback is not called when preenable fails, so the reference
is leaked and the device may remain runtime-active indefinitely.

Store the I2C transfer result in ret and drop the runtime PM reference on
failure before returning the error.

## Patch verfügbar (OSV)

- Kernel ≥ 6.12.96
- Kernel ≥ 6.18.39
- Kernel ≥ 7.1.4

## Referenzen

- <https://git.kernel.org/stable/c/f40292fb19399a3c3f82de698023ba87c01e66cf>
- <https://git.kernel.org/stable/c/ffb2195921c3d629194b9807de589578df9f9cb8>
- <https://git.kernel.org/stable/c/6537f08100189d12bec4975000244e6ac4873c28>
- <https://git.kernel.org/stable/c/adf4bc07f814da8329278d32600147f5a150938c>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-64499) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_