Light Sensor Runtime PM Leak in Linux Kernel Affects Multiple Devices

CVE-2026-64494

What is CVE-2026-64494?

A vulnerability exists in the Linux kernel's gp2ap002 light sensor driver, potentially impacting device performance. The method gp2ap002_read_raw() fails to release a runtime PM reference upon an error in reading the light value. This oversight can prevent the device from entering autosuspend mode, leading to unnecessary power consumption and resource leaks. The issue is mitigated by modifying the error handling path to ensure that the reference is dropped correctly. Users are encouraged to update their Linux kernel to incorporate the fix.

References