CVE-2025-39728

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: samsung: Fix UBSAN panic in samsung_clk_init()

With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due to dereferencing `ctx->clk_data.hws` before setting `ctx->clk_data.num = nr_clks`. Move that up to fix the crash.

UBSAN: array index out of bounds: 00000000f2005512 [#1] PREEMPT SMP <snip> Call trace: samsung_clk_init+0x110/0x124 (P) samsung_clk_init+0x48/0x124 (L) samsung_cmu_register_one+0x3c/0xa0 exynos_arm64_register_cmu+0x54/0x64 __gs101_cmu_top_of_clk_init_declare+0x28/0x60 ...

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-129

Affected software

VendorProductVersions
LinuxLinux>= e620a1e061c4738e26c3edf2abaae7842532cd80, < 00307934eb94aaa0a99addfb37b9fe206f945004; >= e620a1e061c4738e26c3edf2abaae7842532cd80, < d974e177369c034984cece9d7d4fada9f8b9c740; >= e620a1e061c4738e26c3edf2abaae7842532cd80, < 0fef48f4a70e45a93e73c39023c3a6ea624714d6; >= e620a1e061c4738e26c3edf2abaae7842532cd80, < 4d29a6dcb51e346595a15b49693eeb728925ca43; >= e620a1e061c4738e26c3edf2abaae7842532cd80, < 24307866e0ac0a5ddb462e766ceda5e27a6fbbe3; >= e620a1e061c4738e26c3edf2abaae7842532cd80, < a1500b98cd81a32fdfb9bc63c33bb9f0c2a0a1bf; >= e620a1e061c4738e26c3edf2abaae7842532cd80, < 157de9e48007a20c65d02fc0229a16f38134a72d; >= e620a1e061c4738e26c3edf2abaae7842532cd80, < d19d7345a7bcdb083b65568a11b11adffe0687af
LinuxLinux5.5

References

Timeline

Published
Apr 18, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-397295.5In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below CVE-2025-39739.8A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown paCVE-2025-397307.8In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The functionCVE-2025-397315.5In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testinCVE-2025-397325.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask(CVE-2025-397335.5In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various orderinCVE-2025-397345.5In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inode_trylock with inode_lock" This reverts CVE-2025-397357.1In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" lCVE-2025-397365.5In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock CVE-2025-397375.5In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockuCVE-2025-397387.8In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] TCVE-2025-397395.5In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible Add the SM6115 MDSS co
CVE-2025-39728: Medium severity, CVSS 5.5 | Vulnix