CVE-2026-90147

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()

devm_clk_get_optional_enabled_with_rate() registers its cleanup action

before setting the clock rate. If setting the rate fails, it attempts to

disable and unprepare a clock that was never enabled. This issue was

spotted while reviewing "rust: clk: add devres-managed clks" [1].

Register the cleanup action only after successfully preparing and enabling

the clock.

[1]: https://lore.kernel.org/rust-for-linux/[email protected]

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References