CVE-2026-98535

fsl/fman: Fix clk reference leak in read_dts_node()

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fsl/fman: Fix clk reference leak in read_dts_node()

of_clk_get() returns a clock with its reference count incremented, but read_dts_node() only uses it to read the rate and never calls clk_put(). The clock is not stored anywhere, so the reference cannot be released later either.

Release the clock once its rate has been read, which also covers the error path taken when the rate is zero.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before 874fd58b321a9238e47c2a46345444287f2a5781Affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before c2edf376d7804279878b207d93ffe6009c8d3d29Affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before 5c90f99ba74b55ddd8e919224921033cc4077f01Affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before e560bdf62b11dcaa2a018345f76869d89ed43a9eAffected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before 9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8eAffected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before c2a5e591858629b6c0e284010d2ccdbc22fd0a43Affected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before cb52f9f188c3174761ad3b37db9de751e002b52cAffected 414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before a644f09b2090ad22a13fbcf9d141084f573108efAffected
LinuxLinux	4.5Affected before 4.5Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.55 through 6.18.Not affected 7.2.9 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before 874fd58b321a9238e47c2a46345444287f2a5781Affected
414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before c2edf376d7804279878b207d93ffe6009c8d3d29Affected
414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before 5c90f99ba74b55ddd8e919224921033cc4077f01Affected
414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before e560bdf62b11dcaa2a018345f76869d89ed43a9eAffected
414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before 9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8eAffected
414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before c2a5e591858629b6c0e284010d2ccdbc22fd0a43Affected
414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before cb52f9f188c3174761ad3b37db9de751e002b52cAffected
414fd46e77626f4e1f89ab4be6b876ef91e89dfa to before a644f09b2090ad22a13fbcf9d141084f573108efAffected

LinuxLinux

4.5Affected
before 4.5Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.55 through 6.18.*Not affected
7.2.9 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.