All vulnerabilities
CVE-2026-99161

Linux: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in5d476bb76b7d72d8b7ed04a9c614900b097e3af7Also 1875de656370c89b99a150d220df876288ee0344CVE List
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

  • 5d476bb76b7d72d8b7ed04a9c614900b097e3af7LinuxCVE List
  • 1875de656370c89b99a150d220df876288ee0344LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak.

Switch to devm_clk_get() so that the clock is automatically managed and released.

Text from CVE List

Affected versions 8

  • Linuxaffected: 560746eb79d3124a278452c8dd968682b521cc82 before 5d476bb76b7d72d8b7ed04a9c614900b097e3af7CVE List
  • Linuxaffected: 560746eb79d3124a278452c8dd968682b521cc82 before 1875de656370c89b99a150d220df876288ee0344CVE List
  • Linuxaffected: 560746eb79d3124a278452c8dd968682b521cc82 before aaabefc79b0ff0018e8e3832169bbe359d0551fcCVE List
  • Linuxaffected: 3.11CVE List
  • Linuxunaffected: all versions before 3.11CVE List
  • Linuxunaffected: 6.18.59 through 6.18.*CVE List
  • Linuxunaffected: 7.2.13 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3