Answer in brief
CVE-2026-98527 records a Unknown severity vulnerability in gpio: zynq: fix runtime PM leak on request error path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <e380fba02908b809f5bbef371259003cf5887bb4 || >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <a3e9b7f7c9558f8c9592f8f817557bff98707bb3 || >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <60a76cdd92e25f576dc58d756a565760dde1f7a1 || >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac || >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e || >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <58a417a19d80141fff3abe6004e2e47285506e73 || >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <6e20dabffbcd7b222d8e7bb85a7d8e8325df7699 || >=3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 <e9438ab5328a177c9c0e5df87eb92a7162841e98 | e380fba02908b809f5bbef371259003cf5887bb4, a3e9b7f7c9558f8c9592f8f817557bff98707bb3, 60a76cdd92e25f576dc58d756a565760dde1f7a1, 25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac, 6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e, 58a417a19d80141fff3abe6004e2e47285506e73, 6e20dabffbcd7b222d8e7bb85a7d8e8325df7699, e9438ab5328a177c9c0e5df87eb92a7162841e98 |
| Linux/Linuxgeneric | 3.17 | Not reported |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter incremented even when it fails, and zynq_gpio_request() returns the error without dropping it. gpiolib does not call ->free() when ->request() fails, so zynq_gpio_free(), which holds the only matching pm_runtime_put(), never runs. The reference is leaked and the controller can no longer runtime-suspend, so its clock stays enabled. Switch to pm_runtime_resume_and_get(), which only increments the usage counter on success.
Quoted source text, attributed separately from HOL analysis.