PT-2025-46602 · Linux+3 · Linux Kernel+3
Published
2025-11-12
·
Updated
2026-05-07
·
CVE-2025-40127
CVSS v2.0
5.2
Medium
| Vector | AV:A/AC:M/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the hardware random number generator (hwrng) and the ks-sa driver. A division by zero error occurs in the
ks sa rng init function due to an uninitialized clock pointer. Specifically, the clk get rate() function is called on an uninitialized pointer, leading to a division by zero when calculating delay values. The issue is resolved by adding clock initialization code before using the clock.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu