{"apiVersion":"1.0","identifier":"CVE-2026-99049","description":"In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and xgpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so xgpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.","publishedAt":"2026-10-23T13:17:28","lastModifiedAt":"2026-10-30T13:21:41","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-99049","cvssScore":null,"cvssVector":null,"epssProbability":0.00173,"riskScore":null,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-99049","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-99049","en":"https://www.redsauce.net/en/cves/CVE-2026-99049","fr":"https://www.redsauce.net/fr/cves/CVE-2026-99049","pt":"https://www.redsauce.net/pt/cves/CVE-2026-99049","de":"https://www.redsauce.net/de/cves/CVE-2026-99049","sk":"https://www.redsauce.net/sk/cves/CVE-2026-99049","el":"https://www.redsauce.net/el/cves/CVE-2026-99049"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-99049"}}