CVE-2026-98001

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (ltc4282) Make sure clk init data is fully initialized

The clk init data structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to initialize only the members they need. However, not initializing all members may cause subtle issues, which are only exposed when CONFIG INIT STACK ALL PATTERN or CONFIG INIT STACK NONE is enabled.

ltc428 clk provider setup() does not fill in any parent clocks, and assumes that init.num parents is NULL. However, the latter in uninitialized, and thus may cause a crash.

Make sure all members are fully initialized, to fix such bugs, and to avoid future breakage when converting drivers to a different method for specifying the parents.