CVE-2026-98746

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98746", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.367Z", "datePublished": "2026-10-18T15:47:31.780Z", "dateUpdated": "2026-10-21T12:56:22.318Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-21T12:56:22.318Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: ma35d1: Fix clock reference leak in ma35d1serial_probe()\n\nof_clk_get() returns a clock with a reference that has to be released\nwith clk_put(). ma35d1serial_probe() never does that, so the reference\nis leaked on the probe error paths and also when the port is removed.\n\nRelease it on the error paths and in ma35d1serial_remove()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/serial/ma35d1_serial.c"], "versions": [{"version": "930cbf92db0184e327293d5e7089be0b08d46371", "lessThan": "3cdad0c541f899bd9a109b7dc43a1bc76123bc84", "status": "affected", "versionType": "git"}, {"version": "930cbf92db0184e327293d5e7089be0b08d46371", "lessThan": "547c742f3b4acd4634eec47e9bff8731b55059a0", "status": "affected", "versionType": "git"}, {"version": "930cbf92db0184e327293d5e7089be0b08d46371", "lessThan": "d8233d6b391b4cd87df6e89056c21496df7a3012", "status": "affected", "versionType": "git"}, {"version": "930cbf92db0184e327293d5e7089be0b08d46371", "lessThan": "1b303d383089aae7f20ad19fee15690486b935cb", "status": "affected", "versionType": "git"}, {"version": "930cbf92db0184e327293d5e7089be0b08d46371", "lessThan": "98401cf912fe8a081ef8e500c421b6d957b55a99", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/serial/ma35d1_serial.c"], "versions": [{"version": "6.5", "status": "affected"}, {"version": "0", "lessThan": "6.5", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/3cdad0c541f899bd9a109b7dc43a1bc76123bc84"}, {"url": "https://git.kernel.org/stable/c/547c742f3b4acd4634eec47e9bff8731b55059a0"}, {"url": "https://git.kernel.org/stable/c/d8233d6b391b4cd87df6e89056c21496df7a3012"}, {"url": "https://git.kernel.org/stable/c/1b303d383089aae7f20ad19fee15690486b935cb"}, {"url": "https://git.kernel.org/stable/c/98401cf912fe8a081ef8e500c421b6d957b55a99"}], "title": "serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/tty/serial/ma35d1_serial.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "3cdad0c541f899bd9a109b7dc43a1bc76123bc84", "status": "affected", "version": "930cbf92db0184e327293d5e7089be0b08d46371", "versionType": "git"}, {"lessThan": "547c742f3b4acd4634eec47e9bff8731b55059a0", "status": "affected", "version": "930cbf92db0184e327293d5e7089be0b08d46371", "versionType": "git"}, {"lessThan": "d8233d6b391b4cd87df6e89056c21496df7a3012", "status": "affected", "version": "930cbf92db0184e327293d5e7089be0b08d46371", "versionType": "git"}, {"lessThan": "1b303d383089aae7f20ad19fee15690486b935cb", "status": "affected", "version": "930cbf92db0184e327293d5e7089be0b08d46371", "versionType": "git"}, {"lessThan": "98401cf912fe8a081ef8e500c421b6d957b55a99", "status": "affected", "version": "930cbf92db0184e327293d5e7089be0b08d46371", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/tty/serial/ma35d1_serial.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.5"}, {"lessThan": "6.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: ma35d1: Fix clock reference leak in ma35d1serial_probe()\n\nof_clk_get() returns a clock with a reference that has to be released\nwith clk_put(). ma35d1serial_probe() never does that, so the reference\nis leaked on the probe error paths and also when the port is removed.\n\nRelease it on the error paths and in ma35d1serial_remove()."}], "id": "CVE-2026-98746", "lastModified": "2026-10-21T13:21:42.583", "metrics": {}, "published": "2026-10-18T16:17:28.363", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1b303d383089aae7f20ad19fee15690486b935cb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3cdad0c541f899bd9a109b7dc43a1bc76123bc84"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/547c742f3b4acd4634eec47e9bff8731b55059a0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/98401cf912fe8a081ef8e500c421b6d957b55a99"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d8233d6b391b4cd87df6e89056c21496df7a3012"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()", "id": "2555089", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555089"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nserial: ma35d1: Fix clock reference leak in ma35d1serial_probe()\nof_clk_get() returns a clock with a reference that has to be released\nwith clk_put(). ma35d1serial_probe() never does that, so the reference\nis leaked on the probe error paths and also when the port is removed.\nRelease it on the error paths and in ma35d1serial_remove().", "A flaw was found in the Linux kernel's ma35d1 serial driver. This flaw allows a local user to cause a Denial of Service (DoS) through resource exhaustion. The driver fails to release clock references during probe error handling or when the serial port is removed, causing kernel resources to leak upon repeated initialization failures or device unbinding."], "name": "CVE-2026-98746", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98746\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98746\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98746.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[930cbf92db0184e327293d5e7089be0b08d46371,547c742f3b4acd4634eec47e9bff8731b55059a0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[930cbf92db0184e327293d5e7089be0b08d46371,d8233d6b391b4cd87df6e89056c21496df7a3012)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[930cbf92db0184e327293d5e7089be0b08d46371,1b303d383089aae7f20ad19fee15690486b935cb)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[930cbf92db0184e327293d5e7089be0b08d46371,98401cf912fe8a081ef8e500c421b6d957b55a99)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.5"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.5)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.56,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.10,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T22:30:13.854606+00:00", "updated": "2026-10-23T19:00:23.375983+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}