CVE-2026-98535
N/AIn the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in read_dts_node() of_clk_get() returns a clock with its reference count incremented, but read_dts_node() only uses it to read the rate and never calls clk_put(). The clock is not stored anywhere, so the reference cannot be released later either. Release the clock once its rate has been read, which also covers the error path taken when the rate is zero.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 12th percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept & exploit code
- github-search Search GitHub for public PoC repos
Test against your own equipment
curl -s https://vulnpedia.com/cve/CVE-2026-98535/poc.jsonMachine-readable PoC index for this CVE (for automation).Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-98535/poc.json
References
Technical & other
- https://git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781
- https://git.kernel.org/stable/c/c2edf376d7804279878b207d93ffe6009c8d3d29
- https://git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01
- https://git.kernel.org/stable/c/e560bdf62b11dcaa2a018345f76869d89ed43a9e
- https://git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e
- https://git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43
- https://git.kernel.org/stable/c/cb52f9f188c3174761ad3b37db9de751e002b52c
- https://git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef