---
id: "CVE-2026-98437"
kind: "vulnerability"
aliases: ["CVE-2026-98437"]
title: "Linux kernel: Qualcomm Iris video driver leaks runtime PM references on failure"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["arm", "embedded", "infrastructure", "linux-kernel", "qualcomm"]
not_affected_if: ["no-qualcomm-iris-driver"]
published_at: "2026-10-18T15:16:53+00:00"
first_seen_at: "2026-10-23T21:57:15+00:00"
updated_at: "2026-10-25T05:27:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98437", "first_seen_at": "2026-10-23T21:57:15+00:00"}]
---

# Linux kernel: Qualcomm Iris video driver leaks runtime PM references on failure

In the Linux kernel's Qualcomm Iris video decoder driver, runtime power management usage counts can leak when power domain enabling or disabling fails. The sources describe a reference-balancing fix and do not describe an attacker-triggered impact.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update the Linux kernel to a release that includes the upstream commit fixing media: qcom: iris runtime PM reference leaks; the sources do not name a version.

## Timeline

- 2026-10-23T21:57:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98437

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: fix runtime PM reference leaks

Use pm_runtime_resume_and_get() in iris_enable_power_domains()
to avoid leaking a runtime PM usage count on failure.

Also ensure pm_runtime_put_sync() is always called in
iris_disable_power_domains(), even when iris_opp_set_rate()
fails, so runtime PM references remain balanced.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_