{"id":"CVE-2026-90126","summary":"rtc: pcf8563: fix clock provider leak on unbind","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: pcf8563: fix clock provider leak on unbind\n\npcf8563_clkout_register_clk() registers the CLKOUT clock provider with\nof_clk_add_provider(), but nothing ever unwinds it: there is no\nof_clk_del_provider() call and the driver has no remove callback. Each\nof_clk_add_provider() allocates a struct of_clk_provider, takes a\nreference on the OF node and adds an entry to the global of_clk_providers\nlist, none of which is released when the device is unbound. Every\nbind/unbind (or module reload) therefore leaks a provider structure and\nan of_node reference.\n\nThe clock itself is already device-managed (devm_clk_register()); only\nthe provider registration was not. Use devm_of_clk_add_hw_provider() so\nthe provider is removed automatically on unbind. Tie it to the parent\ni2c device, whose OF node carries the #clock-cells and clock-output-names\nproperties (the RTC class device has no OF node of its own).","modified":"2026-09-19T03:47:28.714940353Z","published":"2026-09-17T16:06:28.568Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90126.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/08a59c28c2bdbcd655e99526c86a41dc83834283"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2b5622cf4ee218b6f98d31dbf3fbd44b9b6bd675"},{"type":"WEB","url":"https://git.kernel.org/stable/c/30b7c63af50fe1464e7582a37de1ca4bd030ecc1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/36cb00c33bd83e7ce31b5a9f1f7c70db0cb7776c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6218c0533a72235ec9c5f41b812c63d963bd4a3e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7afb8db47c4f107bce89cfe5115fb31ba7c94665"},{"type":"WEB","url":"https://git.kernel.org/stable/c/97edf3fd9a46ea89a167966991c0449cfa07b36f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9c48a53685040bb0de45a640b34055cbbfc69d4f"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90126.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90126"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"a39a6405d5f949bc651694028a55d74c514ef1f9"},{"fixed":"2b5622cf4ee218b6f98d31dbf3fbd44b9b6bd675"},{"fixed":"36cb00c33bd83e7ce31b5a9f1f7c70db0cb7776c"},{"fixed":"30b7c63af50fe1464e7582a37de1ca4bd030ecc1"},{"fixed":"7afb8db47c4f107bce89cfe5115fb31ba7c94665"},{"fixed":"97edf3fd9a46ea89a167966991c0449cfa07b36f"},{"fixed":"08a59c28c2bdbcd655e99526c86a41dc83834283"},{"fixed":"6218c0533a72235ec9c5f41b812c63d963bd4a3e"},{"fixed":"9c48a53685040bb0de45a640b34055cbbfc69d4f"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90126.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"5.10.270"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.221"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.188"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.157"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.110"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.52"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90126.json"}}],"schema_version":"1.9.0"}