In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, but if gp2ap002_get_lux() fails, it returns directly. This skips the pm_runtime_put_autosuspend() call at the "out" label, permanently leaking a runtime PM reference and preventing the device from autosuspending. Replace the direct return with a "goto out" to ensure the reference is properly dropped on the error path.

A flaw was found in the Linux kernel's `gp2ap002` light sensor driver. When the driver attempts to read lux values and encounters an error, it fails to properly release a power management resource. This oversight leads to a permanent leak of the resource, which prevents the affected device from automatically entering a low-power state (autosuspending). The primary impact is increased power consumption for devices utilizing this driver.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-64494 https://nvd.nist.gov/vuln/detail/CVE-2026-64494 https://lore.kernel.org/linux-cve-announce/2026072551-CVE-2026-64494-f2cb@gregkh/T