{"id":"CVE-2026-90126","revision":"21998098c54d4fdf925cd63532615fc9","records":[{"revision":"21998098c54d4fdf925cd63532615fc9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-90126","aliases":[],"title":"rtc: pcf8563: fix clock provider leak on unbind","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: pcf8563: fix clock provider leak on unbind\n\npcf8563_clkout_register_clk() registers the CLKOUT clock provider with\nof_clk_add_provider(), but nothing ever unwinds it: there is no\nof_clk_del_provider() call and the driver has no remove callback. Each\nof_clk_add_provider() allocates a struct of_clk_provider, takes a\nreference on the OF node and adds an entry to the global of_clk_providers\nlist, none of which is released when the device is unbound. Every\nbind/unbind (or module reload) therefore leaks a provider structure and\nan of_node reference.\n\nThe clock itself is already device-managed (devm_clk_register()); only\nthe provider registration was not. Use devm_of_clk_add_hw_provider() so\nthe provider is removed automatically on unbind. Tie it to the parent\ni2c device, whose OF node carries the #clock-cells and clock-output-names\nproperties (the RTC class device has no OF node of its own).","state":0,"publishedAt":"2026-09-17T16:06:28.568+00:00","modifiedAt":"2026-10-19T08:58:24.498+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/rtc/rtc-pcf8563.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"2b5622cf4ee218b6f98d31dbf3fbd44b9b6bd675\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"36cb00c33bd83e7ce31b5a9f1f7c70db0cb7776c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"30b7c63af50fe1464e7582a37de1ca4bd030ecc1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"7afb8db47c4f107bce89cfe5115fb31ba7c94665\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"97edf3fd9a46ea89a167966991c0449cfa07b36f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"08a59c28c2bdbcd655e99526c86a41dc83834283\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"6218c0533a72235ec9c5f41b812c63d963bd4a3e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a39a6405d5f949bc651694028a55d74c514ef1f9\",\n                            \"lessThan\": \"9c48a53685040bb0de45a640b34055cbbfc69d4f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/rtc/rtc-pcf8563.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.270\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.221\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/2b5622cf4ee218b6f98d31dbf3fbd44b9b6bd675","https://git.kernel.org/stable/c/36cb00c33bd83e7ce31b5a9f1f7c70db0cb7776c","https://git.kernel.org/stable/c/30b7c63af50fe1464e7582a37de1ca4bd030ecc1","https://git.kernel.org/stable/c/7afb8db47c4f107bce89cfe5115fb31ba7c94665","https://git.kernel.org/stable/c/97edf3fd9a46ea89a167966991c0449cfa07b36f","https://git.kernel.org/stable/c/08a59c28c2bdbcd655e99526c86a41dc83834283","https://git.kernel.org/stable/c/6218c0533a72235ec9c5f41b812c63d963bd4a3e","https://git.kernel.org/stable/c/9c48a53685040bb0de45a640b34055cbbfc69d4f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-90126","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-90126","identifiers":["CVE-2026-90126"]},"retained":false,"historicalAffected":[]}],"coverage":[]}