CVE-2026-98746
Received Received - Intake

Clock Reference Leak in Linux Kernel MA35D1 Serial Driver

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get() returns a clock with a reference that has to be released with clk_put(). ma35d1serial_probe() never does that, so the reference is leaked on the probe error paths and also when the port is removed. Release it on the error paths and in ma35d1serial_remove().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98746
EUVD
EUVD-2026-103831

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 930cbf92db0184e327293d5e7089be0b08d46371
Linux Linux 930cbf92db0184e327293d5e7089be0b08d46371
Linux Linux 930cbf92db0184e327293d5e7089be0b08d46371
Linux Linux 930cbf92db0184e327293d5e7089be0b08d46371
Linux Linux 6.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's serial driver for the MA35D1 chip. It involves a clock reference leak where the function ma35d1serial_probe() calls of_clk_get() to get a clock but fails to release it using clk_put(). This causes the clock reference to leak on error paths and when the port is removed.

Detection Guidance

This vulnerability is specific to the Linux kernel's ma35d1 serial driver and involves a clock reference leak. Detection requires checking the kernel logs for errors related to ma35d1serial_probe or ma35d1serial_remove, or verifying if the system uses the affected driver. No direct network detection commands are applicable.

Impact Analysis

The leak can lead to system resource exhaustion over time, potentially causing performance degradation or system instability. It may also result in unexpected behavior in applications relying on the serial driver.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for CVE-2026-98746. If updating is not immediately possible, disable the ma35d1 serial driver if not in use to prevent the clock leak.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98746. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart