CVE-2026-89935
kernel: iio: light: apds9306: fix PM reference leak in apds9306_read_data()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 16, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's apds9306 light sensor driver. This issue occurs because certain error paths within the apds9306_read_data() function fail to properly release a power management reference. This oversight leads to a resource leak, which can prevent the affected device from entering a low-power autosuspend state. Consequently, the device may consume more power than necessary, potentially impacting system battery life or overall energy efficiency.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count