CVE-2026-64503
In the Linux kernel, the following vulnerability has been resolved:
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
kxsd9_write_raw() takes a runtime PM reference with pm_runtime_get_sync()
but returns -EINVAL directly when a scale with a non-zero integer part is
requested, skipping the matching pm_runtime_put_autosuspend(). This leaks
a runtime PM usage-counter reference on every such write, after which the
device can no longer autosuspend.
Set the error code and fall through to the existing put instead of
returning early.
CSIRTS triage
- What
- There is a fix for a runtime PM imbalance on write_raw() error in the kxsd9 driver.
- Who is affected
- Deployments using the kxsd9 driver are affected.
- Urgency
- Remediation is necessary to prevent potential instability, although exploitation status is currently unknown.
- Action
- Apply the fix for CVE-2026-64503.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-64503
Get an email if CVE-2026-64503 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Advisory coverage (2)
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-64503)