{"id":"CVE-2026-90422","revision":"219d3218e0294ac78b73209b5bed58ea","records":[{"revision":"219d3218e0294ac78b73209b5bed58ea","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-90422","aliases":[],"title":"clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nclk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path\n\nWhen mtk_clk_register_pllfhs function fails to register a PLL, it\nunregisters all PLLs and cleans up itself in its error path before\nreturning, so the function callers don't need to do it.\n\nBut contrary to mtk_clk_unregister_pllfhs function, that does almost\nthe same sequence, it does not free the IO memory mapped on fhctl node,\nleading to a leak.\n\nFix this leak by factorizing the cleanup sequence in a new private\nfunction and use it both mtk_clk_register_pllfhs and\nmtk_clk_unregister_pllfhs functions.\n\nAlso, change the loop index start value to avoid the -1 operation on\nindex at each loop.","state":0,"publishedAt":"2026-09-17T16:09:45.83+00:00","modifiedAt":"2026-10-21T12:51:35.803+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/clk/mediatek/clk-pllfh.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d7964de8a8ea800910fdd4e365c42a9e7d5c54aa\",\n                            \"lessThan\": \"6e3e93bc718c4fea556d7ca5fba07ab3511c9918\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d7964de8a8ea800910fdd4e365c42a9e7d5c54aa\",\n                            \"lessThan\": \"111235106099019b8a8d1947dc5c2674e0329ffa\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d7964de8a8ea800910fdd4e365c42a9e7d5c54aa\",\n                            \"lessThan\": \"d35e45e5bad4fabcf122126402b6c6dcb4379672\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d7964de8a8ea800910fdd4e365c42a9e7d5c54aa\",\n                            \"lessThan\": \"fea0b4fd891a2af77b55e05b950e7ea55b5d234e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d7964de8a8ea800910fdd4e365c42a9e7d5c54aa\",\n                            \"lessThan\": \"540d91480bcb1b28a62d7023aa70947ea44c55b9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/clk/mediatek/clk-pllfh.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.114\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/6e3e93bc718c4fea556d7ca5fba07ab3511c9918","https://git.kernel.org/stable/c/111235106099019b8a8d1947dc5c2674e0329ffa","https://git.kernel.org/stable/c/d35e45e5bad4fabcf122126402b6c6dcb4379672","https://git.kernel.org/stable/c/fea0b4fd891a2af77b55e05b950e7ea55b5d234e","https://git.kernel.org/stable/c/540d91480bcb1b28a62d7023aa70947ea44c55b9"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-90422","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-90422","identifiers":["CVE-2026-90422"]},"retained":false,"historicalAffected":[]}],"coverage":[]}