Description
In the Linux kernel, the following vulnerability has been resolved:
clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path
When mtk_clk_register_pllfhs function fails to register a PLL, it unregisters all PLLs and cleans up itself in its error path before returning, so the function callers don't need to do it.
But contrary to mtk_clk_unregister_pllfhs function, that does almost the same sequence, it does not free the IO memory mapped on fhctl node, leading to a leak.
Fix this leak by factorizing the cleanup sequence in a new private function and use it both mtk_clk_register_pllfhs and mtk_clk_unregister_pllfhs functions.
Also, change the loop index start value to avoid the -1 operation on index at each loop.
Metrics
No CVSS score has been published yet.
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= d7964de8a8ea800910fdd4e365c42a9e7d5c54aa, < 6e3e93bc718c4fea556d7ca5fba07ab3511c9918; >= d7964de8a8ea800910fdd4e365c42a9e7d5c54aa, < 111235106099019b8a8d1947dc5c2674e0329ffa; >= d7964de8a8ea800910fdd4e365c42a9e7d5c54aa, < d35e45e5bad4fabcf122126402b6c6dcb4379672; >= d7964de8a8ea800910fdd4e365c42a9e7d5c54aa, < fea0b4fd891a2af77b55e05b950e7ea55b5d234e; >= d7964de8a8ea800910fdd4e365c42a9e7d5c54aa, < 540d91480bcb1b28a62d7023aa70947ea44c55b9 |
| Linux | Linux | 6.2 |
References
- https://git.kernel.org/stable/c/111235106099019b8a8d1947dc5c2674e0329ffa
- https://git.kernel.org/stable/c/540d91480bcb1b28a62d7023aa70947ea44c55b9
- https://git.kernel.org/stable/c/6e3e93bc718c4fea556d7ca5fba07ab3511c9918
- https://git.kernel.org/stable/c/d35e45e5bad4fabcf122126402b6c6dcb4379672
- https://git.kernel.org/stable/c/fea0b4fd891a2af77b55e05b950e7ea55b5d234e
Timeline
- Published
- Sep 17, 2026
- Last modified
- Oct 21, 2026
- NVD status
- Received