Strix
73.2K

CVE-2026-99161

UnknownEPSS 0.18%

Last modified

CVE-2026-99161 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak. Switch to devm_clk_get() so that the clock is automatically managed and released.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak. Switch to devm_clk_get() so that the clock is automatically managed and released.

Metrics

EPSS Probability
0.18%

7.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 560746eb79d3124a278452c8dd968682b521cc82, < e48754da403f61a347d2198fd8b50111319b3a52; >= 560746eb79d3124a278452c8dd968682b521cc82, < f66341404d6ee3f5d451cc97c2f2c5b771e48d25; >= 560746eb79d3124a278452c8dd968682b521cc82, < aa910d9d4c2711478ed1567bc691d0f9651166cb; >= 560746eb79d3124a278452c8dd968682b521cc82, < 9504c8b6644f3c8799206c2e2840260bd416f341; >= 560746eb79d3124a278452c8dd968682b521cc82, < a1b0b91c663be67072a76d76d980577a160ce694; >= 560746eb79d3124a278452c8dd968682b521cc82, < 5d476bb76b7d72d8b7ed04a9c614900b097e3af7; >= 560746eb79d3124a278452c8dd968682b521cc82, < 1875de656370c89b99a150d220df876288ee0344; >= 560746eb79d3124a278452c8dd968682b521cc82, < aaabefc79b0ff0018e8e3832169bbe359d0551fc
LinuxLinux3.11

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-99161?
In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak. Switch to devm_clk_get() so that the clock is automatically managed and released.
How severe is CVE-2026-99161?
Severity scoring for CVE-2026-99161 is pending analysis. The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2026-99161?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-99161?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST