# gpio: zynq: fix runtime PM leak on request error path

CVE record · `CVE-2026-98527`

- **Identifiers:** `CVE-2026-98527`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 18 Oct 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:17 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before e380fba02908b809f5bbef371259003cf5887bb4` (git)
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before a3e9b7f7c9558f8c9592f8f817557bff98707bb3` (git)
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before 60a76cdd92e25f576dc58d756a565760dde1f7a1` (git)
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before 25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac` (git)
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before 6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e` (git)
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before 58a417a19d80141fff3abe6004e2e47285506e73` (git)
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before 6e20dabffbcd7b222d8e7bb85a7d8e8325df7699` (git)
  - affected: `3242ba117e9bd29eb748afd6f6fbfbd6dd7cfe52 to before e9438ab5328a177c9c0e5df87eb92a7162841e98` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `3.17`
  - unaffected: `before 3.17` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.55 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.9 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0022, the 12th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98527](https://www.cve.org/CVERecord?id=CVE-2026-98527)
- [NVD: CVE-2026-98527](https://nvd.nist.gov/vuln/detail/CVE-2026-98527)

### References from the CNA

- <https://git.kernel.org/stable/c/e380fba02908b809f5bbef371259003cf5887bb4>
- <https://git.kernel.org/stable/c/a3e9b7f7c9558f8c9592f8f817557bff98707bb3>
- <https://git.kernel.org/stable/c/60a76cdd92e25f576dc58d756a565760dde1f7a1>
- <https://git.kernel.org/stable/c/25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac>
- <https://git.kernel.org/stable/c/6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e>
- <https://git.kernel.org/stable/c/58a417a19d80141fff3abe6004e2e47285506e73>
- <https://git.kernel.org/stable/c/6e20dabffbcd7b222d8e7bb85a7d8e8325df7699>
- <https://git.kernel.org/stable/c/e9438ab5328a177c9c0e5df87eb92a7162841e98>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98527>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98527/>. Everything for agents: <https://agentprime.io/llms.txt>.