Description
In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8192: Check runtime resume during probe

The MT8192 AFE probe enables runtime PM temporarily while reinitializing
the regmap cache from hardware, but it uses pm_runtime_get_sync()
without checking the return value. If runtime resume fails, probe keeps
going without the device necessarily being accessible, and
pm_runtime_get_sync() may leave the PM usage count incremented.

The regmap_reinit_cache() failure path also returns before dropping the
temporary PM reference and before clearing pm_runtime_bypass_reg_ctl.

Use pm_runtime_resume_and_get() so resume failures do not leak a usage
count, and clear the temporary bypass flag after dropping the probe PM
reference on all regmap_reinit_cache() outcomes.
Published: 2026-08-15
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises when the Mediatek MT8192 audio interface driver probes the device. During this probe, the driver temporarily enables runtime power management but calls pm_runtime_get_sync() without checking its return value. Should runtime resume fail, the probe continues and the PM usage counter remains incremented, leaving the device inaccessible. This leak of the runtime PM usage count can result in a denial of service by preventing normal device operation.

Affected Systems

Any Linux kernel installation that loads the Mediatek MT8192 AFE driver is affected. The issue is confined to the kernel’s sound subsystem (ASoC) and manifests only when the MT8192 driver is present during system boot or driver reload.

Risk and Exploitability

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is unknown, but the attack path is local: the flaw is triggered during driver probe and requires either a reboot or the loading of the affected driver. An attacker with local system access could force a probe by rebooting a system that uses the device, potentially leading to a persistent denial of service.

Generated by OpenCVE AI on August 15, 2026 at 10:05 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a kernel update that includes the patch replacing pm_runtime_get_sync() with pm_runtime_resume_and_get(), ensuring the PM usage count is correctly managed.
  • If a patch is not immediately available, compile the relevant commit from the provided kernel source patches and apply it to your local kernel build.
  • As a temporary workaround, disable runtime power management for the MT8192 device by setting pm_runtime=0 in the module configuration or using kernel boot parameters that bypass runtime PM for that device.
  • Reboot the system after applying any changes to ensure regmap cache and PM state are fully reset.

Generated by OpenCVE AI on August 15, 2026 at 10:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 15 Aug 2026 10:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware, but it uses pm_runtime_get_sync() without checking the return value. If runtime resume fails, probe keeps going without the device necessarily being accessible, and pm_runtime_get_sync() may leave the PM usage count incremented. The regmap_reinit_cache() failure path also returns before dropping the temporary PM reference and before clearing pm_runtime_bypass_reg_ctl. Use pm_runtime_resume_and_get() so resume failures do not leak a usage count, and clear the temporary bypass flag after dropping the probe PM reference on all regmap_reinit_cache() outcomes.
Title ASoC: mediatek: mt8192: Check runtime resume during probe
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:54:48.409Z

Reserved: 2026-08-09T03:40:39.915Z

Link: CVE-2026-72260

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:54.100

Modified: 2026-08-15T06:21:54.100

Link: CVE-2026-72260

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T10:15:03Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime