CVE-2025-40127
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer, resulting in division by zero when calculating delay values. Add clock initialization code before using the clock. drivers/char/hw_random/ks-sa-rng.c | 7 +++++++ 1 file changed, 7 insertions(+)
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux692a04a1e0cde1d80a33df0078c755cf02cd7268, d76b099011fa056950f63d05ebb6160991242f6a, eec7e0e19c1fa75dc65e25aa6a21ef24a03849af, f4238064379a91e71a9c258996acac43c50c2094, 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2, 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2, 612b1dfeb414dfa780a6316014ceddf9a74ff5c0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b ≤ v < 692a04a1e0cde1d80a33df0078c755cf02cd7268, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b ≤ v < d76b099011fa056950f63d05ebb6160991242f6a, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b ≤ v < eec7e0e19c1fa75dc65e25aa6a21ef24a03849af, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b ≤ v < f4238064379a91e71a9c258996acac43c50c2094, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b ≤ v < 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b ≤ v < 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b ≤ v < 612b1dfeb414dfa780a6316014ceddf9a74ff5c0, 5.5 | 692a04a1e0cde1d80a33df0078c755cf02cd7268, d76b099011fa056950f63d05ebb6160991242f6a, eec7e0e19c1fa75dc65e25aa6a21ef24a03849af, f4238064379a91e71a9c258996acac43c50c2094, 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2, 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2, 612b1dfeb414dfa780a6316014ceddf9a74ff5c0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.