The Linux kernel vulnerability CVE-2026-64493 involves a runtime PM reference leak in the mpl115 pressure sensor driver. Specifically, mpl115_read_raw() calls pm_runtime_get_sync() to acquire a runtime PM reference before reading pressure or temperature data. If the read operation fails, the function returns without calling pm_runtime_put_autosuspend(), causing a reference leak. This prevents the device from entering autosuspend state, potentially impacting power management. The fix balances the reference handling by dropping the reference before checking the read result, ensuring no leak occurs.

The vulnerability causes a runtime PM reference leak on read errors, which prevents the device from autosuspending. This can lead to increased power consumption and reduced battery life on affected systems. There is no indication of direct code execution or data corruption from this issue. No known exploits are reported in the wild.

A fix has been implemented in the Linux kernel to address this issue by properly balancing runtime PM references in the mpl115_read_raw() function. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the specific patch and remediation guidance.