CVE-2026-64503 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution vendors, and users of Linux kernel-based systems with the kxsd9 accelerometer driver should assess exposure and apply patches or mitigations as needed.

Why it matters

CVE-2026-64503 is a Linux kernel vulnerability in the iio: accel: kxsd9 driver that could lead to a runtime PM imbalance on write_raw() error. Linux kernel developers, maintainers, and users should assess exposure and apply patches or mitigations as needed.

• Verification of Linux kernel version and kxsd9 driver usage is necessary to determine potential exposure.
• Applying kernel patches may be necessary to address the runtime PM imbalance issue.
• Monitoring systems using the kxsd9 accelerometer driver may be necessary to detect potential issues.

Technical summary

The kxsd9_write_raw() function in the Linux kernel's iio: accel: kxsd9 driver takes a runtime PM reference with pm_runtime_get_sync() but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping the matching pm_runtime_put_autosuspend(). This leads to a runtime PM usage-counter reference leak on every such write, causing the device to no longer autosuspend. The issue arises from improper handling of runtime PM references in the kxsd9_write_raw() function, which can result in a The vulnerability can be addressed by reviewing and applying the provided kernel patches.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the provided kernel patches to address the runtime PM imbalance issue.
• Monitor Linux kernel-based systems using the kxsd9 accelerometer driver for potential issues.
• Verify the system's Linux kernel version and kxsd9 driver usage to determine potential exposure.
• Perform a thorough review of system logs to detect any anomalies related to the kxsd9 driver.
• Consider implementing compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions and retest remediated assets to ensure the issue is fully resolved.
• Review relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. However, additional information on affected versions, exploitation, and remediation is limited. Further verification is needed to determine the full scope of the issue. The Linux kernel's iio: accel: kxsd9 driver is used in various Linux kernel-based systems, and its vulnerability could have significant implications for system stability and security. To verify potential exposure, users should review their Linux kernel version and kxsd9 driver usage. The CVE record and

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.