{"api_version":"1","generated_at":"2026-10-27T11:34:13+00:00","cve":"CVE-2026-99089","urls":{"html":"https://cve.report/CVE-2026-99089","api":"https://cve.report/api/cve/CVE-2026-99089.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-99089","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-99089"},"summary":{"title":"ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: samsung: i2s: enable op_clk in probe to balance runtime PM\n\nThe probe function puts the device into the runtime PM active state with\nonly the \"iis\" bus clock enabled, but it also sets priv->op_clk to the\nparent of the RCLK_SRC mux without enabling it. The runtime PM suspend\ncallback disables both clocks, so the first runtime suspend after probe\ndisables op_clk once more than it was enabled.\n\nOn Exynos5250 Arndale both clocks resolve to the same EXYNOS_I2S_BUS gate,\nso this triggers the following warning during boot:\n\n WARNING: drivers/clk/clk.c:1270 at clk_core_disable+0xe4/0x23c, CPU#0: kworker/u8:3/45\n i2s_bus already disabled\n ...\n Workqueue: pm pm_runtime_work\n Call trace:\n  ...\n  clk_core_disable from clk_disable+0x28/0x34\n  clk_disable from i2s_runtime_suspend+0x58/0x68 [snd_soc_i2s]\n  i2s_runtime_suspend [snd_soc_i2s] from genpd_runtime_suspend+0xc4/0x298\n  genpd_runtime_suspend from __rpm_callback+0x48/0x18c\n  __rpm_callback from rpm_callback+0x4c/0x50\n  rpm_callback from rpm_suspend+0xf4/0x718\n  rpm_suspend from pm_runtime_work+0x9c/0xa0\n  ...\n\nFix this by enabling op_clk in probe right after getting it, so the clock\nstate matches the runtime PM active state, and by disabling it in remove.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-10-26 15:16:47","updated_at":"2026-10-26 15:16:47"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/2c64c30d493d82d5edc95811cede0083e1195822","name":"https://git.kernel.org/stable/c/2c64c30d493d82d5edc95811cede0083e1195822","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/7529254014764ae0b8c33d5c61a58f36c65b1a1c","name":"https://git.kernel.org/stable/c/7529254014764ae0b8c33d5c61a58f36c65b1a1c","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/5dac6bf09b5a4fff2433629801309c3884c3e94a","name":"https://git.kernel.org/stable/c/5dac6bf09b5a4fff2433629801309c3884c3e94a","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/64bb35079dcbc67901da1fe8c52c234cbcd17df3","name":"https://git.kernel.org/stable/c/64bb35079dcbc67901da1fe8c52c234cbcd17df3","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/a728c12f8bd89947894e227d0f4f83a895ac9ab7","name":"https://git.kernel.org/stable/c/a728c12f8bd89947894e227d0f4f83a895ac9ab7","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-99089","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99089","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b 2c64c30d493d82d5edc95811cede0083e1195822 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b 5dac6bf09b5a4fff2433629801309c3884c3e94a git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b 64bb35079dcbc67901da1fe8c52c234cbcd17df3 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b a728c12f8bd89947894e227d0f4f83a895ac9ab7 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 48279c53fd1d09dc0d1b6ebb9f21732c507cea0b 7529254014764ae0b8c33d5c61a58f36c65b1a1c git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 4.17","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 4.17 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.6.160 6.6.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.113 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.57 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2.11 7.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.3 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["sound/soc/samsung/i2s.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2c64c30d493d82d5edc95811cede0083e1195822","status":"affected","version":"48279c53fd1d09dc0d1b6ebb9f21732c507cea0b","versionType":"git"},{"lessThan":"5dac6bf09b5a4fff2433629801309c3884c3e94a","status":"affected","version":"48279c53fd1d09dc0d1b6ebb9f21732c507cea0b","versionType":"git"},{"lessThan":"64bb35079dcbc67901da1fe8c52c234cbcd17df3","status":"affected","version":"48279c53fd1d09dc0d1b6ebb9f21732c507cea0b","versionType":"git"},{"lessThan":"a728c12f8bd89947894e227d0f4f83a895ac9ab7","status":"affected","version":"48279c53fd1d09dc0d1b6ebb9f21732c507cea0b","versionType":"git"},{"lessThan":"7529254014764ae0b8c33d5c61a58f36c65b1a1c","status":"affected","version":"48279c53fd1d09dc0d1b6ebb9f21732c507cea0b","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["sound/soc/samsung/i2s.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.17"},{"lessThan":"4.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.160","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.113","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.57","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.3","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.160","versionStartIncluding":"4.17","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.113","versionStartIncluding":"4.17","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.57","versionStartIncluding":"4.17","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.11","versionStartIncluding":"4.17","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3","versionStartIncluding":"4.17","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: samsung: i2s: enable op_clk in probe to balance runtime PM\n\nThe probe function puts the device into the runtime PM active state with\nonly the \"iis\" bus clock enabled, but it also sets priv->op_clk to the\nparent of the RCLK_SRC mux without enabling it. The runtime PM suspend\ncallback disables both clocks, so the first runtime suspend after probe\ndisables op_clk once more than it was enabled.\n\nOn Exynos5250 Arndale both clocks resolve to the same EXYNOS_I2S_BUS gate,\nso this triggers the following warning during boot:\n\n WARNING: drivers/clk/clk.c:1270 at clk_core_disable+0xe4/0x23c, CPU#0: kworker/u8:3/45\n i2s_bus already disabled\n ...\n Workqueue: pm pm_runtime_work\n Call trace:\n  ...\n  clk_core_disable from clk_disable+0x28/0x34\n  clk_disable from i2s_runtime_suspend+0x58/0x68 [snd_soc_i2s]\n  i2s_runtime_suspend [snd_soc_i2s] from genpd_runtime_suspend+0xc4/0x298\n  genpd_runtime_suspend from __rpm_callback+0x48/0x18c\n  __rpm_callback from rpm_callback+0x4c/0x50\n  rpm_callback from rpm_suspend+0xf4/0x718\n  rpm_suspend from pm_runtime_work+0x9c/0xa0\n  ...\n\nFix this by enabling op_clk in probe right after getting it, so the clock\nstate matches the runtime PM active state, and by disabling it in remove."}],"providerMetadata":{"dateUpdated":"2026-10-26T14:51:59.055Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/2c64c30d493d82d5edc95811cede0083e1195822"},{"url":"https://git.kernel.org/stable/c/5dac6bf09b5a4fff2433629801309c3884c3e94a"},{"url":"https://git.kernel.org/stable/c/64bb35079dcbc67901da1fe8c52c234cbcd17df3"},{"url":"https://git.kernel.org/stable/c/a728c12f8bd89947894e227d0f4f83a895ac9ab7"},{"url":"https://git.kernel.org/stable/c/7529254014764ae0b8c33d5c61a58f36c65b1a1c"}],"title":"ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-99089","datePublished":"2026-10-26T14:51:59.055Z","dateReserved":"2026-09-25T10:25:14.390Z","dateUpdated":"2026-10-26T14:51:59.055Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-26 15:16:47","lastModifiedDate":"2026-10-26 15:16:47","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"99089","Ordinal":"1","Title":"ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM","CVE":"CVE-2026-99089","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"99089","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: samsung: i2s: enable op_clk in probe to balance runtime PM\n\nThe probe function puts the device into the runtime PM active state with\nonly the \"iis\" bus clock enabled, but it also sets priv->op_clk to the\nparent of the RCLK_SRC mux without enabling it. The runtime PM suspend\ncallback disables both clocks, so the first runtime suspend after probe\ndisables op_clk once more than it was enabled.\n\nOn Exynos5250 Arndale both clocks resolve to the same EXYNOS_I2S_BUS gate,\nso this triggers the following warning during boot:\n\n WARNING: drivers/clk/clk.c:1270 at clk_core_disable+0xe4/0x23c, CPU#0: kworker/u8:3/45\n i2s_bus already disabled\n ...\n Workqueue: pm pm_runtime_work\n Call trace:\n  ...\n  clk_core_disable from clk_disable+0x28/0x34\n  clk_disable from i2s_runtime_suspend+0x58/0x68 [snd_soc_i2s]\n  i2s_runtime_suspend [snd_soc_i2s] from genpd_runtime_suspend+0xc4/0x298\n  genpd_runtime_suspend from __rpm_callback+0x48/0x18c\n  __rpm_callback from rpm_callback+0x4c/0x50\n  rpm_callback from rpm_suspend+0xf4/0x718\n  rpm_suspend from pm_runtime_work+0x9c/0xa0\n  ...\n\nFix this by enabling op_clk in probe right after getting it, so the clock\nstate matches the runtime PM active state, and by disabling it in remove.","Type":"Description","Title":"ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM"}]}}}