CVE-2026-99161

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-99161", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.397Z", "datePublished": "2026-10-28T10:35:13.970Z", "dateUpdated": "2026-10-30T12:42:28.035Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:42:28.035Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()\n\nIn wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any\nsubsequent operation fails or when the module is unloaded, the clock\nreference count is never decremented via clk_put(), leading to a\nresource leak.\n\nSwitch to devm_clk_get() so that the clock is automatically managed\nand released."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "versions": [{"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "e48754da403f61a347d2198fd8b50111319b3a52", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "f66341404d6ee3f5d451cc97c2f2c5b771e48d25", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "aa910d9d4c2711478ed1567bc691d0f9651166cb", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "9504c8b6644f3c8799206c2e2840260bd416f341", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "a1b0b91c663be67072a76d76d980577a160ce694", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "5d476bb76b7d72d8b7ed04a9c614900b097e3af7", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "1875de656370c89b99a150d220df876288ee0344", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "aaabefc79b0ff0018e8e3832169bbe359d0551fc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "versions": [{"version": "3.11", "status": "affected"}, {"version": "0", "lessThan": "3.11", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.273", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.161", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.115", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.59", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.13", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "5.10.273"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "6.6.161"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "6.12.115"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "6.18.59"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "7.2.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/e48754da403f61a347d2198fd8b50111319b3a52"}, {"url": "https://git.kernel.org/stable/c/f66341404d6ee3f5d451cc97c2f2c5b771e48d25"}, {"url": "https://git.kernel.org/stable/c/aa910d9d4c2711478ed1567bc691d0f9651166cb"}, {"url": "https://git.kernel.org/stable/c/9504c8b6644f3c8799206c2e2840260bd416f341"}, {"url": "https://git.kernel.org/stable/c/a1b0b91c663be67072a76d76d980577a160ce694"}, {"url": "https://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7"}, {"url": "https://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344"}, {"url": "https://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc"}], "title": "i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "e48754da403f61a347d2198fd8b50111319b3a52", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "f66341404d6ee3f5d451cc97c2f2c5b771e48d25", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "aa910d9d4c2711478ed1567bc691d0f9651166cb", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "9504c8b6644f3c8799206c2e2840260bd416f341", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "a1b0b91c663be67072a76d76d980577a160ce694", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "5d476bb76b7d72d8b7ed04a9c614900b097e3af7", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "1875de656370c89b99a150d220df876288ee0344", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "aaabefc79b0ff0018e8e3832169bbe359d0551fc", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.11"}, {"lessThan": "3.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.273", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.161", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.115", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.59", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.13", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()\n\nIn wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any\nsubsequent operation fails or when the module is unloaded, the clock\nreference count is never decremented via clk_put(), leading to a\nresource leak.\n\nSwitch to devm_clk_get() so that the clock is automatically managed\nand released."}], "id": "CVE-2026-99161", "lastModified": "2026-10-30T13:21:49.930", "metrics": {}, "published": "2026-10-28T11:17:36.390", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9504c8b6644f3c8799206c2e2840260bd416f341"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a1b0b91c663be67072a76d76d980577a160ce694"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aa910d9d4c2711478ed1567bc691d0f9651166cb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e48754da403f61a347d2198fd8b50111319b3a52"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f66341404d6ee3f5d451cc97c2f2c5b771e48d25"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: kernel: Denial of service via clock resource leak in wmt_i2c_probe", "id": "2562712", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562712"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ni2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()\nIn wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any\nsubsequent operation fails or when the module is unloaded, the clock\nreference count is never decremented via clk_put(), leading to a\nresource leak.\nSwitch to devm_clk_get() so that the clock is automatically managed\nand released.", "A flaw was found in the Linux kernel's VIA/Wondermedia I2C driver. The driver fails to properly release clock resources if an initialization error occurs or when the driver is unloaded. A local user could exploit this flaw to cause an unreleased reference count leak, potentially leading to resource exhaustion and a denial of service (DoS)."], "name": "CVE-2026-99161", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-28T10:35:13Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-99161\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-99161\nhttps://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344\nhttps://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7\nhttps://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc"], "statement": "This vulnerability is rated as Low severity because exploitation requires local administrative privileges to trigger driver probe failures or unload operations on specialized VIA/WonderMedia hardware platforms. Standard Red Hat Enterprise Linux configurations do not ship or enable this hardware driver, significantly limiting practical exposure. Furthermore, the issue results only in an unreclaimed clock reference counter over repeated reloads, preventing memory corruption or elevation of privilege.", "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[560746eb79d3124a278452c8dd968682b521cc82,5d476bb76b7d72d8b7ed04a9c614900b097e3af7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[560746eb79d3124a278452c8dd968682b521cc82,1875de656370c89b99a150d220df876288ee0344)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[560746eb79d3124a278452c8dd968682b521cc82,aaabefc79b0ff0018e8e3832169bbe359d0551fc)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,3.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.59,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.13,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[560746eb79d3124a278452c8dd968682b521cc82,5d476bb76b7d72d8b7ed04a9c614900b097e3af7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[560746eb79d3124a278452c8dd968682b521cc82,1875de656370c89b99a150d220df876288ee0344)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[560746eb79d3124a278452c8dd968682b521cc82,aaabefc79b0ff0018e8e3832169bbe359d0551fc)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,3.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.59,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.13,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-28T13:15:18.081407+00:00", "updated": "2026-11-02T04:45:18.128028+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"]}