PT-2025-41365 · Linux · Linux Kernel

Published 2025-09-10 · Updated 2026-02-03 · CVE-2025-39954

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s clock subsystem, specifically within the sunxi-ng module related to dual-divider clocks. The issue stems from an incomplete calculation in the clock rate readback function, leaving out the P divider offset. This can result in inaccurate or zero clock rates, potentially due to a divide-by-zero error when the P divider is set to 1. The correction involves incorporating the P divider offset into the rate calculation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BDU:2026-03759

CVE-2025-39954

Affected Products

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39954.json · Exploit
• https://cve.org/CVERecord?id=CVE-2025-39954 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39954 · Vendor Advisory
• https://git.kernel.org/stable/c/25fbbaf515acd13399589bd5ee6de5f35740cef2 · Patch
• https://git.kernel.org/stable/c/40108f69c372af3aea73e7829d6849a44638d662 · Patch
• https://osv.dev/vulnerability/CVE-2025-39954 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39954 · Security Note
• https://bdu.fstec.ru/vul/2026-03759 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-39954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39954 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39954 · Vendor Advisory
• https://t.me/cveNotify/150736 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.16.9 · Note
• https://t.me/cveNotify/137951 · Telegram Post