CVE-2026-98535
Estado: RecibidaSin puntuar—
Gravedad—Sin puntuar
Probabilidad de explotación0.22 %mayor que el 12 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:
fsl/fman: Corregir la fuga de referencia de reloj en read_dts_node()
of_clk_get() devuelve un reloj con su contador de referencias incrementado, pero read_dts_node() solo lo utiliza para leer la frecuencia y nunca llama a clk_put(). El reloj no se almacena en ningún lugar, por lo que la referencia tampoco puede liberarse posteriormente.
Liberar el reloj una vez leída su frecuencia, lo que también cubre la ruta de error que se toma cuando la frecuencia es cero.
Traducción automática del texto original de NVD (en inglés).
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.22 %
- Percentil entre todas las CVEs puntuadas
- 12
- Fecha de la puntuación
- 20/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
Mostrar las 8 referencias
- https://git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01
- https://git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781
- https://git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e
- https://git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef
- https://git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43
- https://git.kernel.org/stable/c/c2edf376d7804279878b207d93ffe6009c8d3d29
- https://git.kernel.org/stable/c/cb52f9f188c3174761ad3b37db9de751e002b52c
- https://git.kernel.org/stable/c/e560bdf62b11dcaa2a018345f76869d89ed43a9e
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-98535",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "874fd58b321a9238e47c2a46345444287f2a5781",
"versionType": "git"
},
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "c2edf376d7804279878b207d93ffe6009c8d3d29",
"versionType": "git"
},
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "5c90f99ba74b55ddd8e919224921033cc4077f01",
"versionType": "git"
},
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "e560bdf62b11dcaa2a018345f76869d89ed43a9e",
"versionType": "git"
},
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e",
"versionType": "git"
},
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "c2a5e591858629b6c0e284010d2ccdbc22fd0a43",
"versionType": "git"
},
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "cb52f9f188c3174761ad3b37db9de751e002b52c",
"versionType": "git"
},
{
"status": "affected",
"version": "414fd46e77626f4e1f89ab4be6b876ef91e89dfa",
"lessThan": "a644f09b2090ad22a13fbcf9d141084f573108ef",
"versionType": "git"
}
],
"programFiles": [
"drivers/net/ethernet/freescale/fman/fman.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.5"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.271",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.112",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.55",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.9",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/net/ethernet/freescale/fman/fman.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-10-18T16:17:05.223",
"references": [
{
"url": "https://git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c2edf376d7804279878b207d93ffe6009c8d3d29",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/cb52f9f188c3174761ad3b37db9de751e002b52c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e560bdf62b11dcaa2a018345f76869d89ed43a9e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsl/fman: Fix clk reference leak in read_dts_node()\n\nof_clk_get() returns a clock with its reference count incremented, but\nread_dts_node() only uses it to read the rate and never calls clk_put().\nThe clock is not stored anywhere, so the reference cannot be released\nlater either.\n\nRelease the clock once its rate has been read, which also covers the\nerror path taken when the rate is zero."
}
],
"lastModified": "2026-10-19T10:19:09.080",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}