The KXSD9 accelerometer driver in the Linux kernel acquires a runtime power‑management reference with pm_runtime_get_sync() when executing write_raw(). If the write fails with a scale that has a non‑zero integer part, the function immediately returns –EINVAL, bypassing the matching pm_runtime_put_autosuspend(). This results in a leaked usage‑counter reference that prevents the device from autosuspending. The unintended reference accumulation leads to persistent wake state and increased power consumption, potentially draining device batteries. The issue represents a resource‑management flaw (CWE-399) and also reflects a failure to release a resource properly (CWE-772), and does not provide escalation, data disclosure, or remote exploitation capability.

All Linux kernel releases that include the kxsd9 IIO accelerometer driver are affected. No specific version range is identified in the CNA data, so any kernel prior to the commit that applies the fix is potentially vulnerable. Devices running embedded or mobile Linux distributions that rely on auto‑suspend for power savings are of particular interest.

The EPSS score is indicated as less than 1 %, signifying a very low likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog and lacks known remote exploitation mechanisms. The likely attack vector is local, involving user‑space applications that invoke the write_raw() interface of the kxsd9 driver. The impact is confined to increased power draw and failure to autosuspend, without privilege escalation or confidentiality compromise.