CVE-2026-90126

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the pcf8563 RTC driver during device unbind or module reload. The pcf8563 clkout register clk() function uses of clk add provider() to register the CLKOUT clock provider, but fails to call of clk del provider() or implement a remove callback. This results in the allocation of a struct of clk provider, an unreleased reference to the OF node, and a persistent entry in the global of clk providers list every time the device is unbound.

Recommendations Update the Linux kernel to a version where of clk add provider() is replaced by devm of clk add hw provider() in the pcf8563 driver to ensure the provider is automatically removed on unbind.