CVE-2026-99161

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak.

Switch to devm_clk_get() so that the clock is automatically managed and released.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 560746eb79d3124a278452c8dd968682b521cc82, < e48754da403f61a347d2198fd8b50111319b3a52; >= 560746eb79d3124a278452c8dd968682b521cc82, < f66341404d6ee3f5d451cc97c2f2c5b771e48d25; >= 560746eb79d3124a278452c8dd968682b521cc82, < aa910d9d4c2711478ed1567bc691d0f9651166cb; >= 560746eb79d3124a278452c8dd968682b521cc82, < 9504c8b6644f3c8799206c2e2840260bd416f341; >= 560746eb79d3124a278452c8dd968682b521cc82, < a1b0b91c663be67072a76d76d980577a160ce694; >= 560746eb79d3124a278452c8dd968682b521cc82, < 5d476bb76b7d72d8b7ed04a9c614900b097e3af7; >= 560746eb79d3124a278452c8dd968682b521cc82, < 1875de656370c89b99a150d220df876288ee0344; >= 560746eb79d3124a278452c8dd968682b521cc82, < aaabefc79b0ff0018e8e3832169bbe359d0551fc
LinuxLinux3.11

References

Timeline

Published
Oct 28, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-99162In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPCVE-2026-991637.8In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields for synthetic stacktraCVE-2026-991647.8In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers SinceCVE-2026-99165In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate output stream after association connect wait When mesCVE-2026-99166In the Linux kernel, the following vulnerability has been resolved: net: rds: fix uninitialized trans dereference in CM event handler rds_CVE-2026-991677.8In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in __tcf_action_put() __tcf_action_put()CVE-2026-99168In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Check per-CPU register page before mmap Register-page setup CVE-2026-99169In the Linux kernel, the following vulnerability has been resolved: futex: Fix mm reuse handling for FUT_OFF_MMSHARED A FUT_OFF_MMSHARED fCVE-2026-99176.5Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive infCVE-2026-991708.8In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copy_tree() leaves out can't take over a lock CVE-2026-99171In the Linux kernel, the following vulnerability has been resolved: ntfs3: free the sbi after a grace period If the "nocase" mount option CVE-2026-99172In the Linux kernel, the following vulnerability has been resolved: ipc: drop the mqueue mount with kern_unmount() on setup failure mq_ini
CVE-2026-99161: Unscored | Vulnix