{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98529", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.355Z", "datePublished": "2026-10-18T15:17:47.577Z", "dateUpdated": "2026-10-19T09:21:11.695Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:21:11.695Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()\n\nSwitching a persistent GPIO line from input to output acquires a\nruntime PM reference on the parent device, but if the subsequent\nregmap_update_bits() fails the reference is never dropped and no later\ndirection_in() can balance it since the direction was never changed.\nDrop the reference on the update failure path."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-arizona.c"], "versions": [{"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "40c010c1866382cb63ba7497d6ec74fcc60ab9cf", "status": "affected", "versionType": "git"}, {"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "61ed58b745c1186006b8357da651abbb7a6bff17", "status": "affected", "versionType": "git"}, {"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "5c8e87f33b68557a725e72f34051299f55c6fa9e", "status": "affected", "versionType": "git"}, {"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "9d8d6cddcb7c0b8125f3a9e52492e929674009d8", "status": "affected", "versionType": "git"}, {"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "9ee200f484983b0a178c593e57d2fe3e67061ee8", "status": "affected", "versionType": "git"}, {"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "a9f738487c11fb512dadef097b56020239c21810", "status": "affected", "versionType": "git"}, {"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "39748357db26b20a02ea2a25ce48943e6c6d6286", "status": "affected", "versionType": "git"}, {"version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "lessThan": "e9d810279f84b30738f7790c0ed15f8dd5b9024a", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-arizona.c"], "versions": [{"version": "4.13", "status": "affected"}, {"version": "0", "lessThan": "4.13", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.271", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "5.10.271"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.13", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/40c010c1866382cb63ba7497d6ec74fcc60ab9cf"}, {"url": "https://git.kernel.org/stable/c/61ed58b745c1186006b8357da651abbb7a6bff17"}, {"url": "https://git.kernel.org/stable/c/5c8e87f33b68557a725e72f34051299f55c6fa9e"}, {"url": "https://git.kernel.org/stable/c/9d8d6cddcb7c0b8125f3a9e52492e929674009d8"}, {"url": "https://git.kernel.org/stable/c/9ee200f484983b0a178c593e57d2fe3e67061ee8"}, {"url": "https://git.kernel.org/stable/c/a9f738487c11fb512dadef097b56020239c21810"}, {"url": "https://git.kernel.org/stable/c/39748357db26b20a02ea2a25ce48943e6c6d6286"}, {"url": "https://git.kernel.org/stable/c/e9d810279f84b30738f7790c0ed15f8dd5b9024a"}], "title": "gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-arizona.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "40c010c1866382cb63ba7497d6ec74fcc60ab9cf", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}, {"lessThan": "61ed58b745c1186006b8357da651abbb7a6bff17", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}, {"lessThan": "5c8e87f33b68557a725e72f34051299f55c6fa9e", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}, {"lessThan": "9d8d6cddcb7c0b8125f3a9e52492e929674009d8", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}, {"lessThan": "9ee200f484983b0a178c593e57d2fe3e67061ee8", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}, {"lessThan": "a9f738487c11fb512dadef097b56020239c21810", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}, {"lessThan": "39748357db26b20a02ea2a25ce48943e6c6d6286", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}, {"lessThan": "e9d810279f84b30738f7790c0ed15f8dd5b9024a", "status": "affected", "version": "27a49ed17e2245cacbdea88ad78b8494653e0338", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-arizona.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.13"}, {"lessThan": "4.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.271", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()\n\nSwitching a persistent GPIO line from input to output acquires a\nruntime PM reference on the parent device, but if the subsequent\nregmap_update_bits() fails the reference is never dropped and no later\ndirection_in() can balance it since the direction was never changed.\nDrop the reference on the update failure path."}], "id": "CVE-2026-98529", "lastModified": "2026-10-19T10:19:08.257", "metrics": {}, "published": "2026-10-18T16:17:04.410", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/39748357db26b20a02ea2a25ce48943e6c6d6286"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/40c010c1866382cb63ba7497d6ec74fcc60ab9cf"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5c8e87f33b68557a725e72f34051299f55c6fa9e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/61ed58b745c1186006b8357da651abbb7a6bff17"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9d8d6cddcb7c0b8125f3a9e52492e929674009d8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9ee200f484983b0a178c593e57d2fe3e67061ee8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a9f738487c11fb512dadef097b56020239c21810"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e9d810279f84b30738f7790c0ed15f8dd5b9024a"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()", "id": "2554934", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554934"}, "csaw": false, "cvss3": {"cvss3_base_score": "1.9", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-911", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ngpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()\nSwitching a persistent GPIO line from input to output acquires a\nruntime PM reference on the parent device, but if the subsequent\nregmap_update_bits() fails the reference is never dropped and no later\ndirection_in() can balance it since the direction was never changed.\nDrop the reference on the update failure path.", "A flaw was found in the Linux kernel's Arizona General Purpose Input/Output (GPIO) driver. This issue allows a local user to cause a resource leak by triggering an error during persistent GPIO line configuration. Specifically, if an internal register update fails while changing pin direction from input to output, the runtime Power Management (PM) reference counter is not decremented. As a result, the parent device is prevented from entering low-power suspend states, causing continuous power consumption."], "name": "CVE-2026-98529", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98529\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98529\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98529.mbox"], "threat_severity": "Low"}

{"created": "2026-10-18T17:30:16.960214+00:00", "updated": "2026-10-18T17:30:16.960219+00:00", "vendors": [], "weaknesses": ["CWE-401"]}