CVE-2026-98535

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98535
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98535.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98535
Downstream
Published
2026-10-18T15:17:58Z
Modified
2026-10-20T02:30:21Z
Summary
fsl/fman: Fix clk reference leak in read_dts_node()
Details

In the Linux kernel, the following vulnerability has been resolved:

fsl/fman: Fix clk reference leak in read_dts_node()

of_clk_get() returns a clock with its reference count incremented, but read_dts_node() only uses it to read the rate and never calls clk_put(). The clock is not stored anywhere, so the reference cannot be released later either.

Release the clock once its rate has been read, which also covers the error path taken when the rate is zero.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98535.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
414fd46e77626f4e1f89ab4be6b876ef91e89dfa
Fixed
874fd58b321a9238e47c2a46345444287f2a5781
Fixed
c2edf376d7804279878b207d93ffe6009c8d3d29
Fixed
5c90f99ba74b55ddd8e919224921033cc4077f01
Fixed
e560bdf62b11dcaa2a018345f76869d89ed43a9e
Fixed
9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e
Fixed
c2a5e591858629b6c0e284010d2ccdbc22fd0a43
Fixed
cb52f9f188c3174761ad3b37db9de751e002b52c
Fixed
a644f09b2090ad22a13fbcf9d141084f573108ef

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98535.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.5.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98535.json"