In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock()… (CVE-2026-64171)
A vulnerability in the Linux kernel's Tegra I2C driver caused a runtime power management reference leak when mutex locking failed. This leak prevents the device from entering runtime suspend, potentially impacting system availability. The issue was fixed by adding a missing pm_runtime_put() call before returning on lock failure.
AI Analysis
Technical Summary
The Linux kernel's Tegra I2C driver had a flaw where if tegra_i2c_mutex_lock() failed, the function returned without calling pm_runtime_put(), leaking the runtime PM reference acquired by pm_runtime_get_sync(). This prevented the device from entering runtime suspend. The fix involves adding the missing pm_runtime_put() call before returning on lock failure to properly release the runtime PM reference.
Potential Impact
The vulnerability causes a runtime power management reference leak that prevents the affected device from entering runtime suspend, which can lead to increased power consumption and reduced system availability. There is no impact on confidentiality or integrity. The CVSS score is 5.5 (medium severity) with no known exploits in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to add the missing pm_runtime_put() call on mutex lock failure in the Tegra I2C driver. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel advisory for the exact fixed versions and remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock()… (CVE-2026-64171)
Description
A vulnerability in the Linux kernel's Tegra I2C driver caused a runtime power management reference leak when mutex locking failed. This leak prevents the device from entering runtime suspend, potentially impacting system availability. The issue was fixed by adding a missing pm_runtime_put() call before returning on lock failure.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's Tegra I2C driver had a flaw where if tegra_i2c_mutex_lock() failed, the function returned without calling pm_runtime_put(), leaking the runtime PM reference acquired by pm_runtime_get_sync(). This prevented the device from entering runtime suspend. The fix involves adding the missing pm_runtime_put() call before returning on lock failure to properly release the runtime PM reference.
Potential Impact
The vulnerability causes a runtime power management reference leak that prevents the affected device from entering runtime suspend, which can lead to increased power consumption and reduced system availability. There is no impact on confidentiality or integrity. The CVSS score is 5.5 (medium severity) with no known exploits in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to add the missing pm_runtime_put() call on mutex lock failure in the Tegra I2C driver. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel advisory for the exact fixed versions and remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-5qc2-5c25-4m38
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64171"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a82a4a8d598912a87f
Added to database: 07/19/2026, 19:38:16 UTC
Last enriched: 08/13/2026, 19:12:24 UTC
Last updated: 09/01/2026, 22:52:13 UTC
Views: 59
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.