Improper Management of Runtime Power in Linux Kernel Affects Device Functionality

CVE-2026-99248

What is CVE-2026-99248?

In the Linux kernel, a vulnerability related to runtime power management has been identified. This issue arises from a faulty implementation in the i2c driver, specifically in managing runtime power states. Manual and automatic power management functions were not properly balanced during device teardown, leading to a critical warning during clock management operations. The mismanaged state can result in warnings during device removal due to attempts to disable clocks that are already inactive. To mitigate this vulnerability, the management helpers should be properly ordered, ensuring that runtime power management is disabled before freeing up the resources associated with the device. This adjustment will maintain a balanced call count for clock operations, eliminating the potential for unnecessary warnings and ensuring that device functionality remains intact during removal.

References