CVE-2026-90406

A flaw was found in the Linux kernel's media: qcom: iris driver. This vulnerability occurs when the iris_core_deinit() function fails to properly handle a runtime Power Management (PM) resume failure. An attacker could potentially exploit this by triggering a scenario where the pm_runtime_resume_and_get() function fails, leading to unbalanced runtime PM references and skipped hardware power-off operations. This could result in resource exhaustion or system instability, potentially causing a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.