CVE-2026-90147
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-90147, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-17
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()
devm_clk_get_optional_enabled_with_rate() registers its cleanup action
before setting the clock rate. If setting the rate fails, it attempts to
disable and unprepare a clock that was never enabled. This issue was
spotted while reviewing "rust: clk: add devres-managed clks" [1].
Register the cleanup action only after successfully preparing and enabling
the clock.
[1]: https://lore.kernel.org/rust-for-linux/20260706-clk-type-state-v5-3-67c5f326a16c@collabora.com
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 9934a1bd45b2b03f6d1204a6ae2780d3b009799f |
| Linux | Linux | 9934a1bd45b2b03f6d1204a6ae2780d3b009799f |
| Linux | Linux | 9934a1bd45b2b03f6d1204a6ae2780d3b009799f |
| Linux | Linux | 9934a1bd45b2b03f6d1204a6ae2780d3b009799f |
| Linux | Linux | 6.12 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
