CVE-2026-90422

CVE CVE-2026-90422EUVD EUVD-2026-82083Published 2026-09-17T16:09:45.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path When mtk_clk_register_pllfhs function fails to register a PLL, it unregisters all PLLs and cleans up itself in its error path before returning, so the function callers don't need to do it. But contrary to mtk_clk_unregister_pllfhs function, that does almost the same sequence, it does not free the IO memory mapped on fhctl node, leading to a leak. Fix this leak by factorizing the cleanup sequence in a new private function and use it both mtk_clk_register_pllfhs and mtk_clk_unregister_pllfhs functions. Also, change the loop index start value to avoid the -1 operation on index at each loop.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux patch: 7.3-rc1; d7964de8a8ea800910fdd4e365c42a9e7d5c54aa <d35e45e5bad4fabcf122126402b6c6dcb4379672; 6.2; patch: 6.18.52; patch: 7.2.6; patch: 0; d7964de8a8ea800910fdd4e365c42a9e7d5c54aa <540d91480bcb1b28a62d7023aa70947ea44c55b9; d7964de8a8ea800910fdd4e365c42a9e7d5c54aa <fea0b4fd891a2af77b55e05b950e7ea55b5d234e

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.