CVE-2026-90422

Source
https://cve.org/CVERecord?id=CVE-2026-90422
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90422.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90422
Downstream
Related
Published
2026-09-17T16:09:45Z
Modified
2026-10-28T02:31:10Z
Summary
clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path
Details

In the Linux kernel, the following vulnerability has been resolved:

clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path

When mtk_clk_register_pllfhs function fails to register a PLL, it unregisters all PLLs and cleans up itself in its error path before returning, so the function callers don't need to do it.

But contrary to mtk_clk_unregister_pllfhs function, that does almost the same sequence, it does not free the IO memory mapped on fhctl node, leading to a leak.

Fix this leak by factorizing the cleanup sequence in a new private function and use it both mtk_clk_register_pllfhs and mtk_clk_unregister_pllfhs functions.

Also, change the loop index start value to avoid the -1 operation on index at each loop.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90422.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d7964de8a8ea800910fdd4e365c42a9e7d5c54aa
Fixed
6e3e93bc718c4fea556d7ca5fba07ab3511c9918
Fixed
111235106099019b8a8d1947dc5c2674e0329ffa
Fixed
d35e45e5bad4fabcf122126402b6c6dcb4379672
Fixed
fea0b4fd891a2af77b55e05b950e7ea55b5d234e
Fixed
540d91480bcb1b28a62d7023aa70947ea44c55b9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90422.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90422.json"