CVE-2025-40127

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

hwrng: ks-sa - fix division by zero in ks_sa_rng_init

Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer, resulting in division by zero when calculating delay values.

Add clock initialization code before using the clock.

drivers/char/hw_random/ks-sa-rng.c | 7 +++++++ 1 file changed, 7 insertions(+)

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 692a04a1e0cde1d80a33df0078c755cf02cd7268; >= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < d76b099011fa056950f63d05ebb6160991242f6a; >= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < eec7e0e19c1fa75dc65e25aa6a21ef24a03849af; >= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < f4238064379a91e71a9c258996acac43c50c2094; >= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2; >= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2; >= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 612b1dfeb414dfa780a6316014ceddf9a74ff5c0
LinuxLinux5.5

References

Timeline

Published
Nov 12, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-401297.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdr_stCVE-2025-40139.8A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as critical. Affected is an unknown functiCVE-2025-40130In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling CVE-2025-40131In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu() In atCVE-2025-40132In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In creCVE-2025-401338.1In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). CVE-2025-40134In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race conCVE-2025-401358.1In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_CVE-2025-40136In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved interrupt for virtual function CVE-2025-40137In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate first page in error path of f2fs_truncate() syzbCVE-2025-40138In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistCVE-2025-401397.8In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). sm
CVE-2025-40127: Unscored | Vulnix