CVE-2026-98437
kernel: media: qcom: iris: fix runtime PM reference leaks
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 18, 2026
Updated · October 19, 2026
Description
A flaw was found in the Linux kernel's Qualcomm Iris video driver. A local user could cause a Denial of Service (DoS) or resource exhaustion through improper error handling during power domain configuration. When enabling or disabling power domains encounters an error, the driver fails to properly release runtime Power Management (PM) references, potentially preventing the device from entering low-power states and disrupting power management.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-911 · Improper Update of Reference Count