CVE-2026-98535

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98535", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.355Z", "datePublished": "2026-10-18T15:17:58.081Z", "dateUpdated": "2026-10-19T09:21:18.753Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:21:18.753Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsl/fman: Fix clk reference leak in read_dts_node()\n\nof_clk_get() returns a clock with its reference count incremented, but\nread_dts_node() only uses it to read the rate and never calls clk_put().\nThe clock is not stored anywhere, so the reference cannot be released\nlater either.\n\nRelease the clock once its rate has been read, which also covers the\nerror path taken when the rate is zero."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/freescale/fman/fman.c"], "versions": [{"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "874fd58b321a9238e47c2a46345444287f2a5781", "status": "affected", "versionType": "git"}, {"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "c2edf376d7804279878b207d93ffe6009c8d3d29", "status": "affected", "versionType": "git"}, {"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "5c90f99ba74b55ddd8e919224921033cc4077f01", "status": "affected", "versionType": "git"}, {"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "e560bdf62b11dcaa2a018345f76869d89ed43a9e", "status": "affected", "versionType": "git"}, {"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e", "status": "affected", "versionType": "git"}, {"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "c2a5e591858629b6c0e284010d2ccdbc22fd0a43", "status": "affected", "versionType": "git"}, {"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "cb52f9f188c3174761ad3b37db9de751e002b52c", "status": "affected", "versionType": "git"}, {"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "lessThan": "a644f09b2090ad22a13fbcf9d141084f573108ef", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/freescale/fman/fman.c"], "versions": [{"version": "4.5", "status": "affected"}, {"version": "0", "lessThan": "4.5", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.271", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "5.10.271"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.5", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781"}, {"url": "https://git.kernel.org/stable/c/c2edf376d7804279878b207d93ffe6009c8d3d29"}, {"url": "https://git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01"}, {"url": "https://git.kernel.org/stable/c/e560bdf62b11dcaa2a018345f76869d89ed43a9e"}, {"url": "https://git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e"}, {"url": "https://git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43"}, {"url": "https://git.kernel.org/stable/c/cb52f9f188c3174761ad3b37db9de751e002b52c"}, {"url": "https://git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef"}], "title": "fsl/fman: Fix clk reference leak in read_dts_node()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/freescale/fman/fman.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "874fd58b321a9238e47c2a46345444287f2a5781", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}, {"lessThan": "c2edf376d7804279878b207d93ffe6009c8d3d29", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}, {"lessThan": "5c90f99ba74b55ddd8e919224921033cc4077f01", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}, {"lessThan": "e560bdf62b11dcaa2a018345f76869d89ed43a9e", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}, {"lessThan": "9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}, {"lessThan": "c2a5e591858629b6c0e284010d2ccdbc22fd0a43", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}, {"lessThan": "cb52f9f188c3174761ad3b37db9de751e002b52c", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}, {"lessThan": "a644f09b2090ad22a13fbcf9d141084f573108ef", "status": "affected", "version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/freescale/fman/fman.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.5"}, {"lessThan": "4.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.271", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsl/fman: Fix clk reference leak in read_dts_node()\n\nof_clk_get() returns a clock with its reference count incremented, but\nread_dts_node() only uses it to read the rate and never calls clk_put().\nThe clock is not stored anywhere, so the reference cannot be released\nlater either.\n\nRelease the clock once its rate has been read, which also covers the\nerror path taken when the rate is zero."}], "id": "CVE-2026-98535", "lastModified": "2026-10-19T10:19:09.080", "metrics": {}, "published": "2026-10-18T16:17:05.223", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c2edf376d7804279878b207d93ffe6009c8d3d29"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cb52f9f188c3174761ad3b37db9de751e002b52c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e560bdf62b11dcaa2a018345f76869d89ed43a9e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: fsl/fman: Fix clk reference leak in read_dts_node()", "id": "2555003", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555003"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nfsl/fman: Fix clk reference leak in read_dts_node()\nof_clk_get() returns a clock with its reference count incremented, but\nread_dts_node() only uses it to read the rate and never calls clk_put().\nThe clock is not stored anywhere, so the reference cannot be released\nlater either.\nRelease the clock once its rate has been read, which also covers the\nerror path taken when the rate is zero.", "A flaw was found in the Linux kernel's Freescale Frame Manager (fman) network driver. During device initialization, the driver retrieves a system clock resource to check its frequency but fails to release the reference count after reading the value. This omission results in a resource leak, preventing the clock object from being properly freed and potentially causing resource exhaustion."], "name": "CVE-2026-98535", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98535\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98535\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98535.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,874fd58b321a9238e47c2a46345444287f2a5781)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,c2edf376d7804279878b207d93ffe6009c8d3d29)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,5c90f99ba74b55ddd8e919224921033cc4077f01)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,e560bdf62b11dcaa2a018345f76869d89ed43a9e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,c2a5e591858629b6c0e284010d2ccdbc22fd0a43)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,cb52f9f188c3174761ad3b37db9de751e002b52c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[414fd46e77626f4e1f89ab4be6b876ef91e89dfa,a644f09b2090ad22a13fbcf9d141084f573108ef)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.5"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.5)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.271,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.222,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.189,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.158,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.55,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.9,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T23:30:14.147497+00:00", "updated": "2026-10-20T12:15:14.051235+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-749", "CWE-772"]}