CVE-2026-98746: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()
In the Linux kernel, the following vulnerability has been resolved:
serial: ma35d1: Fix clock reference leak in ma35d1serialprobe()
ofclkget() returns a clock with a reference that has to be released with clkput(). ma35d1serialprobe() never does that, so the reference is leaked on the probe error paths and also when the port is removed.
Release it on the error paths and in ma35d1serialremove().
Affected Software
Event History
Frequently Asked Questions
Which systems are affected by this issue?
Systems running the Linux kernel with the MA35D1 serial driver are affected when ma35d1serial_probe() is invoked. The leak occurs on driver probe error paths and when the serial port is removed.
What is the practical impact of the flaw?
The driver can retain an unreleased clock reference because it obtains the clock with of_clk_get() without a corresponding clk_put(). Repeated affected probe failures or port removals can accumulate leaked clock references.
Is attacker interaction required to trigger it?
The provided information describes a driver resource-management defect and does not identify a remote attack vector or attacker prerequisites. Triggering is tied to the MA35D1 serial driver's probe error handling or port removal.
What should be done if an update cannot be applied immediately?
The available information does not provide a documented workaround. Limit repeated probe failures and removal/re-addition cycles involving the MA35D1 serial port until a kernel containing the fix can be deployed.