CVE-2025-38583

clk: xilinx: vcu: unregister pll_post only if registered correctly

State
Published
Severity
Not scored
Published
Aug 19, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: xilinx: vcu: unregister pll_post only if registered correctly

If registration of pll_post is failed, it will be set to NULL or ERR, unregistering same will fail with following call trace:

Unable to handle kernel NULL pointer dereference at virtual address 008 pc : clk_hw_unregister+0xc/0x20 lr : clk_hw_unregister_fixed_factor+0x18/0x30 sp : ffff800011923850 ... Call trace: clk_hw_unregister+0xc/0x20 clk_hw_unregister_fixed_factor+0x18/0x30 xvcu_unregister_clock_provider+0xcc/0xf4 [xlnx_vcu] xvcu_probe+0x2bc/0x53c [xlnx_vcu]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4472e1849db7f719bbf625890096e0269b5849fe to before 7e903da71f8bec4beb7c06707900e1ed8db843caAffected
  • 4472e1849db7f719bbf625890096e0269b5849fe to before 88bd875b7f9c3652c27d6e4bb7a23701b764f762Affected
  • 4472e1849db7f719bbf625890096e0269b5849fe to before 51990eecf22f446550befdfd1a9f54147eafd636Affected
  • 4472e1849db7f719bbf625890096e0269b5849fe to before f1a1be99d5ae53d3b404415f1665eb59e8e02a8cAffected
  • 4472e1849db7f719bbf625890096e0269b5849fe to before 86124c5cfceb5ac04d2fddbf1b6f7147332d96a3Affected
  • 4472e1849db7f719bbf625890096e0269b5849fe to before a72b1c2d3b53e088bfaeb593949ff6fbd2cbe8edAffected
  • 4472e1849db7f719bbf625890096e0269b5849fe to before 3b0abc443ac22f7d4f61ddbbbbc5dbb06c87139dAffected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 5.15.190 through 5.15.*Not affected
  • 6.1.148 through 6.1.*Not affected
  • 6.6.102 through 6.6.*Not affected
  • 6.12.42 through 6.12.*Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.