CVE-2026-90147
Last modified
CVE-2026-90147 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() devm_clk_get_optional_enabled_with_rate() registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock that was never enabled.
Description
In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() devm_clk_get_optional_enabled_with_rate() registers its cleanup action before setting the clock rate. If setting the rate fails, it attempts to disable and unprepare a clock that was never enabled. This issue was spotted while reviewing "rust: clk: add devres-managed clks" [1]. Register the cleanup action only after successfully preparing and enabling the clock. [1]: https://lore.kernel.org/rust-for-linux/20260706-clk-type-state-v5-3-67c5f326a16c@collabora.com
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 9934a1bd45b2b03f6d1204a6ae2780d3b009799f, < 9a365f41fe0f227ef5a269e240233bd0bffc66c9; >= 9934a1bd45b2b03f6d1204a6ae2780d3b009799f, < 9d4843f1051259854f724e9cdc5b9eac56327037; >= 9934a1bd45b2b03f6d1204a6ae2780d3b009799f, < 647157fecb42b72d930e7b7d0bfbc5f2db9a858a; >= 9934a1bd45b2b03f6d1204a6ae2780d3b009799f, < 0d4d262c1664365e17e0a5ba2ab79f4db484b44e |
| Linux | Linux | 6.12 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-90147?
How severe is CVE-2026-90147?
How do I fix CVE-2026-90147?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-90141In the Linux kernel, the following vulnerability has been re…7.3
- CVE-2026-90142In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-90143In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-90144In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90145In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-90146In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-90148In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90149In the Linux kernel, the following vulnerability has been re…7.5
- CVE-2026-9015The Equalize Digital Accessibility Checker – WCAG, ADA, EAA …4.3
- CVE-2026-90150In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90151In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-90152In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-90147?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
