{"id":"CVE-2026-90147","revision":"573e6ff35b0e4d4fa7e4ed14b67a192c","records":[{"revision":"573e6ff35b0e4d4fa7e4ed14b67a192c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-90147","aliases":[],"title":"clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nclk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()\n\ndevm_clk_get_optional_enabled_with_rate() registers its cleanup action\nbefore setting the clock rate. If setting the rate fails, it attempts to\ndisable and unprepare a clock that was never enabled. This issue was\nspotted while reviewing \"rust: clk: add devres-managed clks\" [1].\n\nRegister the cleanup action only after successfully preparing and enabling\nthe clock.\n\n[1]: https://lore.kernel.org/rust-for-linux/20260706-clk-type-state-v5-3-67c5f326a16c@collabora.com","state":0,"publishedAt":"2026-09-17T16:06:42.342+00:00","modifiedAt":"2026-10-19T08:58:46.427+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/clk/clk-devres.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"9934a1bd45b2b03f6d1204a6ae2780d3b009799f\",\n                            \"lessThan\": \"9a365f41fe0f227ef5a269e240233bd0bffc66c9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9934a1bd45b2b03f6d1204a6ae2780d3b009799f\",\n                            \"lessThan\": \"9d4843f1051259854f724e9cdc5b9eac56327037\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9934a1bd45b2b03f6d1204a6ae2780d3b009799f\",\n                            \"lessThan\": \"647157fecb42b72d930e7b7d0bfbc5f2db9a858a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9934a1bd45b2b03f6d1204a6ae2780d3b009799f\",\n                            \"lessThan\": \"0d4d262c1664365e17e0a5ba2ab79f4db484b44e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/clk/clk-devres.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/9a365f41fe0f227ef5a269e240233bd0bffc66c9","https://git.kernel.org/stable/c/9d4843f1051259854f724e9cdc5b9eac56327037","https://git.kernel.org/stable/c/647157fecb42b72d930e7b7d0bfbc5f2db9a858a","https://git.kernel.org/stable/c/0d4d262c1664365e17e0a5ba2ab79f4db484b44e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-90147","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-90147","identifiers":["CVE-2026-90147"]},"retained":false,"historicalAffected":[]}],"coverage":[]}