Unscored severity · published Oct 28, 2026
CVE-2026-99161
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
New
–
CVSS
–
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
In wmt_i2c_probe(), i2c->clk is acquired using of_clk_get(). If any
subsequent operation fails or when the module is unloaded, the clock
reference count is never decremented via clk_put(), leading to a
resource leak.
Switch to devm_clk_get() so that the clock is automatically managed
and released.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
560746eb79d3124a278452c8dd968682b521cc82 before 5d476bb76b7d72d8b7ed04a9c614900b097e3af7; 560746eb79d3124a278452c8dd968682b521cc82 before 1875de656370c89b99a150d220df876288ee0344; 560746eb79d3124a278452c8dd968682b521cc82 before aaabefc79b0ff0018e8e3832169bbe359d0551fc; 3.11 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-99161
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-99161
git.kernel.org
https://git.kernel.org/stable/c/5d476bb76b7d72d8b7ed04a9c614900b097e3af7
git.kernel.org
https://git.kernel.org/stable/c/1875de656370c89b99a150d220df876288ee0344
git.kernel.org
https://git.kernel.org/stable/c/aaabefc79b0ff0018e8e3832169bbe359d0551fc
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
7.8
CVE-2025-38352
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
