CVE-2026-99161 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak. Switch to devm_clk_get() so that the clock is automatically managed and released.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344
https://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7
https://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc

History

Wed, 28 Oct 2026 18:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux linux
Vendors & Products		Linux linux

Wed, 28 Oct 2026 13:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-399

Wed, 28 Oct 2026 10:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any subsequent operation fails or when the module is unloaded, the clock reference count is never decremented via clk_put(), leading to a resource leak. Switch to devm_clk_get() so that the clock is automatically managed and released.
Title		i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344 https://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7 https://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-10-28T10:35:13.970Z

Updated: 2026-10-28T10:35:13.970Z

Reserved: 2026-09-25T10:25:14.397Z

Link: CVE-2026-99161

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-28T11:17:36.390

Modified: 2026-10-28T11:17:36.390

Link: CVE-2026-99161

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-99161", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.397Z", "datePublished": "2026-10-28T10:35:13.970Z", "dateUpdated": "2026-10-28T10:35:13.970Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-28T10:35:13.970Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()\n\nIn wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any\nsubsequent operation fails or when the module is unloaded, the clock\nreference count is never decremented via clk_put(), leading to a\nresource leak.\n\nSwitch to devm_clk_get() so that the clock is automatically managed\nand released."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "versions": [{"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "5d476bb76b7d72d8b7ed04a9c614900b097e3af7", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "1875de656370c89b99a150d220df876288ee0344", "status": "affected", "versionType": "git"}, {"version": "560746eb79d3124a278452c8dd968682b521cc82", "lessThan": "aaabefc79b0ff0018e8e3832169bbe359d0551fc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "versions": [{"version": "3.11", "status": "affected"}, {"version": "0", "lessThan": "3.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.59", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.13", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "6.18.59"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "7.2.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.11", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7"}, {"url": "https://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344"}, {"url": "https://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc"}], "title": "i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "5d476bb76b7d72d8b7ed04a9c614900b097e3af7", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "1875de656370c89b99a150d220df876288ee0344", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}, {"lessThan": "aaabefc79b0ff0018e8e3832169bbe359d0551fc", "status": "affected", "version": "560746eb79d3124a278452c8dd968682b521cc82", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/i2c/busses/i2c-viai2c-wmt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.11"}, {"lessThan": "3.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.59", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.13", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()\n\nIn wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any\nsubsequent operation fails or when the module is unloaded, the clock\nreference count is never decremented via clk_put(), leading to a\nresource leak.\n\nSwitch to devm_clk_get() so that the clock is automatically managed\nand released."}], "id": "CVE-2026-99161", "lastModified": "2026-10-28T11:17:36.390", "metrics": {}, "published": "2026-10-28T11:17:36.390", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}