DEBIAN-CVE-2026-99161: Debian/linux vulnerability
Published Oct 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmti2cprobe() In wmti2cprobe(), i2c->clk is acquired using ofclkget(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clkput(), leading to a resource leak. Switch to devmclkget() so that the clock is automatically managed and released.
Affected Software
3 affected components
debian/linux*
debian/linux*
debian/linux*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel i2c viai2c-wmt driver, change wmt_i2c_probe() to acquire i2c->clk with devm_clk_get() instead of of_clk_get(), so the clock is automatically released when the module is unloaded or a subsequent operation fails.
Event History
Oct 28, 2026
CVE Published
via OSV·11:17 AM
Data Sourced
via OSV·11:17 AM
DescriptionAffected Software