CVE-2026-99161

Published: October 30, 2026Last modified: October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak. Switch to devm_clk_get() so that the clock is automatically managed and released.

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSlinux-ltsVulnerable (6.1.189-r0)
25 LTSlinux-ltsVulnerable (6.12.112-r0)
Streamlinux-ltsVulnerable (6.18.58-r0)

References

ON THIS PAGE