CVE-2026-90422

clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 21, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path

When mtk_clk_register_pllfhs function fails to register a PLL, it unregisters all PLLs and cleans up itself in its error path before returning, so the function callers don't need to do it.

But contrary to mtk_clk_unregister_pllfhs function, that does almost the same sequence, it does not free the IO memory mapped on fhctl node, leading to a leak.

Fix this leak by factorizing the cleanup sequence in a new private function and use it both mtk_clk_register_pllfhs and mtk_clk_unregister_pllfhs functions.

Also, change the loop index start value to avoid the -1 operation on index at each loop.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d7964de8a8ea800910fdd4e365c42a9e7d5c54aa to before 6e3e93bc718c4fea556d7ca5fba07ab3511c9918Affected
  • d7964de8a8ea800910fdd4e365c42a9e7d5c54aa to before 111235106099019b8a8d1947dc5c2674e0329ffaAffected
  • d7964de8a8ea800910fdd4e365c42a9e7d5c54aa to before d35e45e5bad4fabcf122126402b6c6dcb4379672Affected
  • d7964de8a8ea800910fdd4e365c42a9e7d5c54aa to before fea0b4fd891a2af77b55e05b950e7ea55b5d234eAffected
  • d7964de8a8ea800910fdd4e365c42a9e7d5c54aa to before 540d91480bcb1b28a62d7023aa70947ea44c55b9Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.