All vulnerabilities
CVE-2026-98535

Linux: fsl/fman: Fix clk reference leak in read_dts_node()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.22%Chance of exploitation activity in the next 30 days, higher than 11% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in874fd58b321a9238e47c2a46345444287f2a5781Also 5c90f99ba74b55ddd8e919224921033cc4077f01, 9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8eCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 874fd58b321a9238e47c2a46345444287f2a5781LinuxCVE List
  • 5c90f99ba74b55ddd8e919224921033cc4077f01LinuxCVE List
  • 9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8eLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

fsl/fman: Fix clk reference leak in read_dts_node()

of_clk_get() returns a clock with its reference count incremented, but read_dts_node() only uses it to read the rate and never calls clk_put(). The clock is not stored anywhere, so the reference cannot be released later either.

Release the clock once its rate has been read, which also covers the error path taken when the rate is zero.

Text from CVE List

Affected versions 18

  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before 874fd58b321a9238e47c2a46345444287f2a5781CVE List
  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before c2edf376d7804279878b207d93ffe6009c8d3d29CVE List
  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before 5c90f99ba74b55ddd8e919224921033cc4077f01CVE List
  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before e560bdf62b11dcaa2a018345f76869d89ed43a9eCVE List
  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before 9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8eCVE List
  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before c2a5e591858629b6c0e284010d2ccdbc22fd0a43CVE List
  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before cb52f9f188c3174761ad3b37db9de751e002b52cCVE List
  • Linuxaffected: 414fd46e77626f4e1f89ab4be6b876ef91e89dfa before a644f09b2090ad22a13fbcf9d141084f573108efCVE List
  • Linuxaffected: 4.5CVE List
  • Linuxunaffected: all versions before 4.5CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8