fsl/fman: Fix clk reference leak in read_dts_node()
Summary
| CVE | CVE-2026-98535 |
|---|
| State | PUBLISHED |
|---|
| Assigner | Linux |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2026-10-18 16:17:05 UTC |
|---|
| Updated | 2026-10-18 16:17:05 UTC |
|---|
| Description | In the Linux kernel, the following vulnerability has been resolved:
fsl/fman: Fix clk reference leak in read_dts_node()
of_clk_get() returns a clock with its reference count incremented, but
read_dts_node() only uses it to read the rate and never calls clk_put().
The clock is not stored anywhere, so the reference cannot be released
later either.
Release the clock once its rate has been read, which also covers the
error path taken when the rate is zero. |
|---|
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa 874fd58b321a9238e47c2a46345444287f2a5781 git |
Not specified |
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa c2edf376d7804279878b207d93ffe6009c8d3d29 git |
Not specified |
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa 5c90f99ba74b55ddd8e919224921033cc4077f01 git |
Not specified |
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa e560bdf62b11dcaa2a018345f76869d89ed43a9e git |
Not specified |
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa 9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e git |
Not specified |
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa c2a5e591858629b6c0e284010d2ccdbc22fd0a43 git |
Not specified |
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa cb52f9f188c3174761ad3b37db9de751e002b52c git |
Not specified |
| CNA |
Linux |
Linux |
affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa a644f09b2090ad22a13fbcf9d141084f573108ef git |
Not specified |
| CNA |
Linux |
Linux |
affected 4.5 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 4.5 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.10.271 5.10.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.15.222 5.15.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.189 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.158 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.112 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.55 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2.9 7.2.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.3 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/e560bdf62b11dcaa2a018345f76869d89ed43a9e |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/c2edf376d7804279878b207d93ffe6009c8d3d29 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/cb52f9f188c3174761ad3b37db9de751e002b52c |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.