In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use… (CVE-2026-98437)

The Linux kernel's Qualcomm iris media driver had a vulnerability involving runtime PM reference leaks. Specifically, iris_enable_power_domains() did not properly manage the runtime PM usage count on failure, leading to leaks. Additionally, iris_disable_power_domains() did not always call pm_runtime_put_sync() when iris_opp_set_rate() failed, causing unbalanced runtime PM references. The fix applies pm_runtime_resume_and_get() in iris_enable_power_domains() and guarantees pm_runtime_put_sync() is called in iris_disable_power_domains() to maintain balanced runtime PM references.

Unbalanced runtime PM references can lead to resource leaks in the kernel's power management subsystem, potentially causing increased power consumption or instability in the affected media driver. There is no indication of direct exploitation or broader security impact such as privilege escalation or denial of service from the provided data.

A fix has been implemented in the Linux kernel to address this vulnerability by correcting the runtime PM reference handling in the Qualcomm iris media driver. Users should update to the fixed kernel version once it is released. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel release notes for the exact fixed versions and remediation guidance.