Strix
72.2K

CVE-2026-98746

UnknownEPSS 0.17%

Last modified

CVE-2026-98746 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get() returns a clock with a reference that has to be released with clk_put(). ma35d1serial_probe() never does that, so the reference is leaked on the probe error paths and also when the port is removed. Release it on the error paths and in ma35d1serial_remove().. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get() returns a clock with a reference that has to be released with clk_put(). ma35d1serial_probe() never does that, so the reference is leaked on the probe error paths and also when the port is removed. Release it on the error paths and in ma35d1serial_remove().

Metrics

EPSS Probability
0.17%

5.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 930cbf92db0184e327293d5e7089be0b08d46371, < 3cdad0c541f899bd9a109b7dc43a1bc76123bc84; >= 930cbf92db0184e327293d5e7089be0b08d46371, < 547c742f3b4acd4634eec47e9bff8731b55059a0; >= 930cbf92db0184e327293d5e7089be0b08d46371, < d8233d6b391b4cd87df6e89056c21496df7a3012; >= 930cbf92db0184e327293d5e7089be0b08d46371, < 1b303d383089aae7f20ad19fee15690486b935cb; >= 930cbf92db0184e327293d5e7089be0b08d46371, < 98401cf912fe8a081ef8e500c421b6d957b55a99
LinuxLinux6.5

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98746?
In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get() returns a clock with a reference that has to be released with clk_put(). ma35d1serial_probe() never does that, so the reference is leaked on the probe error paths and also when the port is removed. Release it on the error paths and in ma35d1serial_remove().
How severe is CVE-2026-98746?
Severity scoring for CVE-2026-98746 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98746?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98746?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST