CVE-2026-90147
kernel: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's clock management subsystem. The devm_clk_get_optional_enabled_with_rate() function registers its cleanup action prematurely, before successfully setting the clock rate. If the rate setting fails, the system attempts to disable and unprepare a clock that was never properly enabled. This incorrect resource handling could lead to system instability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-832 · Unlock of a Resource that is not Locked