CVE-2026-99161

i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

State
Published
Severity
Not scored
Published
Oct 28, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak.

Switch to devm_clk_get() so that the clock is automatically managed and released.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 560746eb79d3124a278452c8dd968682b521cc82 to before e48754da403f61a347d2198fd8b50111319b3a52Affected
  • 560746eb79d3124a278452c8dd968682b521cc82 to before f66341404d6ee3f5d451cc97c2f2c5b771e48d25Affected
  • 560746eb79d3124a278452c8dd968682b521cc82 to before aa910d9d4c2711478ed1567bc691d0f9651166cbAffected
  • 560746eb79d3124a278452c8dd968682b521cc82 to before 9504c8b6644f3c8799206c2e2840260bd416f341Affected
  • 560746eb79d3124a278452c8dd968682b521cc82 to before a1b0b91c663be67072a76d76d980577a160ce694Affected
  • 560746eb79d3124a278452c8dd968682b521cc82 to before 5d476bb76b7d72d8b7ed04a9c614900b097e3af7Affected
  • 560746eb79d3124a278452c8dd968682b521cc82 to before 1875de656370c89b99a150d220df876288ee0344Affected
  • 560746eb79d3124a278452c8dd968682b521cc82 to before aaabefc79b0ff0018e8e3832169bbe359d0551fcAffected
LinuxLinux
  • 3.11Affected
  • before 3.11Not affected
  • 5.10.273 through 5.10.*Not affected
  • 5.15.224 through 5.15.*Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.161 through 6.6.*Not affected
  • 6.12.115 through 6.12.*Not affected
  • 6.18.59 through 6.18.*Not affected
  • 7.2.13 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.