{"cve":"CVE-2026-98535","nvd":{"published":"2026-10-18T16:17:05.223","modified":"2026-10-19T10:19:09.080","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfsl/fman: Fix clk reference leak in read_dts_node()\n\nof_clk_get() returns a clock with its reference count incremented, but\nread_dts_node() only uses it to read the rate and never calls clk_put().\nThe clock is not stored anywhere, so the reference cannot be released\nlater either.\n\nRelease the clock once its rate has been read, which also covers the\nerror path taken when the rate is zero.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01","https://git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781","https://git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e","https://git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef","https://git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43"],"products":[],"source":"nvd","synced_at":"2026-10-19T23:00:53.604569364+00:00"},"epss":{"cve":"CVE-2026-98535","score":0.0022,"percentile":0.12413,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}