01 Record

CVE-2026-43355

iio: light: bh1780: fix PM runtime leak on error path

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

iio: light: bh1780: fix PM runtime leak on error path

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.5% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-04.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-08 14:21Z3 MO AGO

Last updated

2026-07-04 11:50Z2 MO AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

34a932b7789ec8dcffe1b1889da3072bcadb6c70fd3f5c08892a94d43b2cc4ab

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1f0477f18306c018a954e4f333690a9d0f7efc76 to < 1eb3af4f59e09323788860a9155e9766b12891e5, 1f0477f18306c018a954e4f333690a9d0f7efc76 to < 4228f7f053b452be625919ccbb605912bae0dc98, 1f0477f18306c018a954e4f333690a9d0f7efc76 to < 424bf90e87134effe4bd932608a15286493b11ab, 1f0477f18306c018a954e4f333690a9d0f7efc76 to < fc77e0a5600e620a2ae51ec78933162fb217b20b, 1f0477f18306c018a954e4f333690a9d0f7efc76 to < ad58fa1cb11e4ceb702786a494352c7ff2eca1ed, 1f0477f18306c018a954e4f333690a9d0f7efc76 to < aae572ddc28578af476cce7da3faec0395ef0bf0, 1f0477f18306c018a954e4f333690a9d0f7efc76 to < 33661bfc85c14836bfef4425a74b0ca2df4bb5ad, 1f0477f18306c018a954e4f333690a9d0f7efc76 to < dd72e6c3cdea05cad24e99710939086f7a113fb5, 4.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/1eb3af4f59e09323788860a9155e9766b12891e5
git.kernel.orghttps://git.kernel.org/stable/c/4228f7f053b452be625919ccbb605912bae0dc98
git.kernel.orghttps://git.kernel.org/stable/c/424bf90e87134effe4bd932608a15286493b11ab
git.kernel.orghttps://git.kernel.org/stable/c/fc77e0a5600e620a2ae51ec78933162fb217b20b
git.kernel.orghttps://git.kernel.org/stable/c/ad58fa1cb11e4ceb702786a494352c7ff2eca1ed
git.kernel.orghttps://git.kernel.org/stable/c/aae572ddc28578af476cce7da3faec0395ef0bf0
git.kernel.orghttps://git.kernel.org/stable/c/33661bfc85c14836bfef4425a74b0ca2df4bb5ad
git.kernel.orghttps://git.kernel.org/stable/c/dd72e6c3cdea05cad24e99710939086f7a113fb5

01 Record index

CVE-2026-43355

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43355

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References