The Linux kernel’s I2C driver for Tegra devices contains a missing pm_runtime_put() call when tegra_i2c_mutex_lock() fails. This leads to an unbalanced pm_runtime_get_sync() reference, causing a runtime power‑management reference leak that keeps the affected I2C device from entering runtime suspend. The flaw is classified as CWE-772, indicating a resource leak. The description offers no mention of privilege escalation, denial of service, or remote code execution.

The vulnerability is present in Linux kernel releases that contain the legacy i2c/tegra driver. This driver is used on Tegra‑based systems; while the vendor is not explicitly stated, the driver name indicates it is associated with Tegra hardware.

The CVSS score of 5.5 indicates medium severity, while the EPSS score of < 1 % signifies a very low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Exploitation would require local access to the kernel and the ability to trigger the mutex lock failure; there is no known network exposure or privilege escalation vector. The primary risk lies in the inability of the device to enter runtime suspend, which can lead to increased power consumption but does not compromise system confidentiality, integrity, or availability directly.