CVE-2026-98535

CVE-2026-98535

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fsl/fman: Fix clk reference leak in read_dts_node()

of_clk_get() returns a clock with its reference count incremented, but

read_dts_node() only uses it to read the rate and never calls clk_put().

The clock is not stored anywhere, so the reference cannot be released

later either.

Release the clock once its rate has been read, which also covers the

error path taken when the rate is zero.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.8th percentile
Published
2026-10-18T20:17Z
References (8)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:17Z
    fsl/fman: Fix clk reference leak in read_dts_node()
    cvelistv5
  • 18 OCT 15:17Z
    fsl/fman: Fix clk reference leak in read_dts_node()
    cvelistv5