Use-After-Free Vulnerability in Linux Kernel Affecting RTC Clock Provider

CVE-2026-98826

What is CVE-2026-98826?

This vulnerability in the Linux kernel's RTC-32k clock provider arises from a flaw in the ac100 driver, where resources are not properly managed during probe failure scenarios. Specifically, when the registration of the RTC-32k clock fails, it leaves a dangling global clock provider, potentially allowing for subsequent memory access violations. This situation can be exploited if device nodes attempt to access the released resources, creating instability and unpredictable behavior in systems relying on the ac100 driver. Proper device management practices are crucial to mitigate such use-after-free scenarios.

References