CVE-2026-98746

Description

In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get() returns a clock with a reference that has to be released with clk_put(). ma35d1serial_probe() never does that, so the reference is leaked on the probe error paths and also when the port is removed. Release it on the error paths and in ma35d1serial_remove().

Is your site exposed to CVE-2026-98746?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0017

Probability of exploitation

0.06%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/1b303d383089aae7f20ad19fee15690486b935cb https://git.kernel.org/stable/c/3cdad0c541f899bd9a109b7dc43a1bc76123bc84 https://git.kernel.org/stable/c/547c742f3b4acd4634eec47e9bff8731b55059a0 https://git.kernel.org/stable/c/98401cf912fe8a081ef8e500c421b6d957b55a99 https://git.kernel.org/stable/c/d8233d6b391b4cd87df6e89056c21496df7a3012

Frequently Asked Questions

What is CVE-2026-98746? +

In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get() returns a clock with a reference that has to be released with clk_put(). ma35d1serial_probe() never does that, so the reference is leaked on the probe error paths and also when the port is removed. Release it on the error paths and in ma35d1serial_remove().

How do I check if I'm vulnerable to CVE-2026-98746? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.