GHSA-G833-2RHH-96RV

Vulnerability from github – Published: 2026-08-15 06:32 – Updated: 2026-08-23 15:33
VLAI
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8192: Check runtime resume during probe

The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pm_runtime_get_sync() without checking the return value. If runtime resume fails, probe keeps going without the device necessarily being accessible, and pm_runtime_get_sync() may leave the PM usage count incremented.

The regmap_reinit_cache() failure path also returns before dropping the temporary PM reference and before clearing pm_runtime_bypass_reg_ctl.

Use pm_runtime_resume_and_get() so resume failures do not leak a usage count, and clear the temporary bypass flag after dropping the probe PM reference on all regmap_reinit_cache() outcomes.

Show details on source website
To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2026-72260"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-15T06:21:54Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8192: Check runtime resume during probe\n\nThe MT8192 AFE probe enables runtime PM temporarily while reinitializing\nthe regmap cache from hardware, but it uses pm_runtime_get_sync()\nwithout checking the return value. If runtime resume fails, probe keeps\ngoing without the device necessarily being accessible, and\npm_runtime_get_sync() may leave the PM usage count incremented.\n\nThe regmap_reinit_cache() failure path also returns before dropping the\ntemporary PM reference and before clearing pm_runtime_bypass_reg_ctl.\n\nUse pm_runtime_resume_and_get() so resume failures do not leak a usage\ncount, and clear the temporary bypass flag after dropping the probe PM\nreference on all regmap_reinit_cache() outcomes.",
  "id": "GHSA-g833-2rhh-96rv",
  "modified": "2026-08-23T15:33:01Z",
  "published": "2026-08-15T06:32:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72260"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6e2ee6eacc3ec7b339753abcf33812d27e03efe5"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/91b20e8c9b64042056d14394c89c81fc16a1c327"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9339266a8a720889d0385cfd78ba6652fe7bb1a8"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e0f276f1918a202e9c3ac72baffd311cecb6b8db"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e24d5dde56a50946020b134fa8448869093db76a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f6e424835cc05d215c57b6370b2c1e353dd02915"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/faa97a1a6cab01cd3e2055deb4db4e57efc43ff2"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.