---
id: CVE-2026-98746
title: >-
  kernel: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()
  (CVE-2026-98746)
summary: >-
  A flaw was found in the Linux kernel's ma35d1 serial driver. This flaw allows
  a local user to cause a Denial of Service (DoS) through resource exhaustion.
  The driver fails to release clock references during probe error handling or
  when the…
severity: low
cvss: 2.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L'
cvssSource: vendor
cwe: CWE-772
vendor: Red Hat
product: Linux
affected:
  - >-
    Linux >= 930cbf92db0184e327293d5e7089be0b08d46371 <
    3cdad0c541f899bd9a109b7dc43a1bc76123bc84
  - >-
    Linux >= 930cbf92db0184e327293d5e7089be0b08d46371 <
    547c742f3b4acd4634eec47e9bff8731b55059a0
  - >-
    Linux >= 930cbf92db0184e327293d5e7089be0b08d46371 <
    d8233d6b391b4cd87df6e89056c21496df7a3012
  - >-
    Linux >= 930cbf92db0184e327293d5e7089be0b08d46371 <
    1b303d383089aae7f20ad19fee15690486b935cb
  - >-
    Linux >= 930cbf92db0184e327293d5e7089be0b08d46371 <
    98401cf912fe8a081ef8e500c421b6d957b55a99
  - Linux 6.5
published: '2026-10-18'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T03:21:12+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98746.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98746.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98746'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2555089'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98746'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98746'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98746.mbox
  - url: 'https://git.kernel.org/stable/c/3cdad0c541f899bd9a109b7dc43a1bc76123bc84'
  - url: 'https://git.kernel.org/stable/c/547c742f3b4acd4634eec47e9bff8731b55059a0'
  - url: 'https://git.kernel.org/stable/c/d8233d6b391b4cd87df6e89056c21496df7a3012'
  - url: 'https://git.kernel.org/stable/c/1b303d383089aae7f20ad19fee15690486b935cb'
  - url: 'https://git.kernel.org/stable/c/98401cf912fe8a081ef8e500c421b6d957b55a99'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00168
epssPercentile: 0.06028
ingestedAt: '2026-10-18T16:47:32.501Z'
---

## Overview

A flaw was found in the Linux kernel's ma35d1 serial driver. This flaw allows a local user to cause a Denial of Service (DoS) through resource exhaustion. The driver fails to release clock references during probe error handling or when the serial port is removed, causing kernel resources to leak upon repeated initialization failures or device unbinding.

## Vendor advisories

- **Red Hat VEX** · Low · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98746.json)

**kernel: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()** — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-23.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

## Remediation

Refer to the advisory for fix availability.