CVE-2025-38583

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: xilinx: vcu: unregister pll_post only if registered correctly

If registration of pll_post is failed, it will be set to NULL or ERR, unregistering same will fail with following call trace:

Unable to handle kernel NULL pointer dereference at virtual address 008 pc : clk_hw_unregister+0xc/0x20 lr : clk_hw_unregister_fixed_factor+0x18/0x30 sp : ffff800011923850 ... Call trace: clk_hw_unregister+0xc/0x20 clk_hw_unregister_fixed_factor+0x18/0x30 xvcu_unregister_clock_provider+0xcc/0xf4 [xlnx_vcu] xvcu_probe+0x2bc/0x53c [xlnx_vcu]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 4472e1849db7f719bbf625890096e0269b5849fe, < 7e903da71f8bec4beb7c06707900e1ed8db843ca; >= 4472e1849db7f719bbf625890096e0269b5849fe, < 88bd875b7f9c3652c27d6e4bb7a23701b764f762; >= 4472e1849db7f719bbf625890096e0269b5849fe, < 51990eecf22f446550befdfd1a9f54147eafd636; >= 4472e1849db7f719bbf625890096e0269b5849fe, < f1a1be99d5ae53d3b404415f1665eb59e8e02a8c; >= 4472e1849db7f719bbf625890096e0269b5849fe, < 86124c5cfceb5ac04d2fddbf1b6f7147332d96a3; >= 4472e1849db7f719bbf625890096e0269b5849fe, < a72b1c2d3b53e088bfaeb593949ff6fbd2cbe8ed; >= 4472e1849db7f719bbf625890096e0269b5849fe, < 3b0abc443ac22f7d4f61ddbbbbc5dbb06c87139d
LinuxLinux5.12

References

Timeline

Published
Aug 19, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-385847.8In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in pCVE-2025-385857.8In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int(CVE-2025-385865.5In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix fp initialization for exception boundary In the ARM64 CVE-2025-385875.5In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_useCVE-2025-385885.5In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop in rt6_nlmsg_size() While testing prior paCVE-2025-385895.5In the Linux kernel, the following vulnerability has been resolved: neighbour: Fix null-ptr-deref in neigh_flush_dev(). kernel test robot CVE-2025-38596.1Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentiallCVE-2025-385905.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove skb secpath if xfrm state is not found Hardware retuCVE-2025-385915.5In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields The following BPF prCVE-2025-385927.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv CurrentCVE-2025-385937.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' CVE-2025-385947.8In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d233
CVE-2025-38583: Medium severity, CVSS 5.5 | Vulnix