CVE-2026-90147 PUBLISHED

clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()

Assigner: Linux
Reserved: 11.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()

devm_clk_get_optional_enabled_with_rate() registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock that was never enabled. This issue was spotted while reviewing "rust: clk: add devres-managed clks" 1.

Register the cleanup action only after successfully preparing and enabling the clock.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 9934a1bd45b2b03f6d1204a6ae2780d3b009799f to 9a365f41fe0f227ef5a269e240233bd0bffc66c9 (excl.)
  • affected from 9934a1bd45b2b03f6d1204a6ae2780d3b009799f to 9d4843f1051259854f724e9cdc5b9eac56327037 (excl.)
  • affected from 9934a1bd45b2b03f6d1204a6ae2780d3b009799f to 647157fecb42b72d930e7b7d0bfbc5f2db9a858a (excl.)
  • affected from 9934a1bd45b2b03f6d1204a6ae2780d3b009799f to 0d4d262c1664365e17e0a5ba2ab79f4db484b44e (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.12 is affected
  • unaffected from 0 to 6.12 (excl.)
  • unaffected from 6.12.110 to 6.12.* (incl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References