Linux Kernel Vulnerability in Samsung I2S Device Driver

CVE-2026-99089

What is CVE-2026-99089?

A vulnerability exists in the Linux kernel's implementation of the Samsung I2S device driver, where the probe function mistakenly enables the 'iis' bus clock but fails to activate the op_clk. This mismatch leads to runtime power management (PM) issues, as the op_clk is deactivated prematurely during the first suspend operation post-probe. The problem manifests itself in warnings during boot on platforms like Exynos5250 Arndale, indicating that the i2s_bus has already been disabled. A fix has been implemented to ensure that the op_clk is enabled immediately after it is acquired in the probe function and properly disabled during the removal process.

References