In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync()… (CVE-2026-98527)

The Linux kernel gpio driver for Zynq platforms had a flaw where pm_runtime_get_sync() would increment the runtime PM usage counter even if it failed, and zynq_gpio_request() would return the error without decrementing it. Because gpiolib does not call the free function on request failure, the corresponding pm_runtime_put() call in zynq_gpio_free() never executes, causing a reference leak. This prevents the controller from runtime-suspending and keeps its clock enabled. The fix replaces pm_runtime_get_sync() with pm_runtime_resume_and_get(), which increments the usage counter only upon success, preventing the leak.

The vulnerability causes a runtime PM usage counter leak that prevents the Zynq gpio controller from suspending its clock, potentially leading to higher power consumption. There is no indication of direct security compromise or code execution. The impact is primarily resource management and power efficiency degradation.

A fix is available that replaces pm_runtime_get_sync() with pm_runtime_resume_and_get() in the Zynq gpio driver to prevent the runtime PM usage counter leak. Users should apply the official Linux kernel update that includes this fix. No additional mitigation is indicated.