CVE-2025-39728

clk: samsung: Fix UBSAN panic in samsung_clk_init()

State: Published
Severity: 5.5 Medium
Published: Apr 18, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: samsung: Fix UBSAN panic in samsung_clk_init()

With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due to dereferencing `ctx->clk_data.hws` before setting `ctx->clk_data.num = nr_clks`. Move that up to fix the crash.

UBSAN: array index out of bounds: 00000000f2005512 [#1] PREEMPT SMP <snip> Call trace: samsung_clk_init+0x110/0x124 (P) samsung_clk_init+0x48/0x124 (L) samsung_cmu_register_one+0x3c/0xa0 exynos_arm64_register_cmu+0x54/0x64 __gs101_cmu_top_of_clk_init_declare+0x28/0x60 ...

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-129 Improper Validation of Array Index

Affected Products

Product	Versions
LinuxLinux	e620a1e061c4738e26c3edf2abaae7842532cd80 to before 00307934eb94aaa0a99addfb37b9fe206f945004Affected e620a1e061c4738e26c3edf2abaae7842532cd80 to before d974e177369c034984cece9d7d4fada9f8b9c740Affected e620a1e061c4738e26c3edf2abaae7842532cd80 to before 0fef48f4a70e45a93e73c39023c3a6ea624714d6Affected e620a1e061c4738e26c3edf2abaae7842532cd80 to before 4d29a6dcb51e346595a15b49693eeb728925ca43Affected e620a1e061c4738e26c3edf2abaae7842532cd80 to before 24307866e0ac0a5ddb462e766ceda5e27a6fbbe3Affected e620a1e061c4738e26c3edf2abaae7842532cd80 to before a1500b98cd81a32fdfb9bc63c33bb9f0c2a0a1bfAffected e620a1e061c4738e26c3edf2abaae7842532cd80 to before 157de9e48007a20c65d02fc0229a16f38134a72dAffected e620a1e061c4738e26c3edf2abaae7842532cd80 to before d19d7345a7bcdb083b65568a11b11adffe0687afAffected
LinuxLinux	5.5Affected before 5.5Not affected 5.10.236 through 5.10.Not affected 5.15.180 through 5.15.Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

e620a1e061c4738e26c3edf2abaae7842532cd80 to before 00307934eb94aaa0a99addfb37b9fe206f945004Affected
e620a1e061c4738e26c3edf2abaae7842532cd80 to before d974e177369c034984cece9d7d4fada9f8b9c740Affected
e620a1e061c4738e26c3edf2abaae7842532cd80 to before 0fef48f4a70e45a93e73c39023c3a6ea624714d6Affected
e620a1e061c4738e26c3edf2abaae7842532cd80 to before 4d29a6dcb51e346595a15b49693eeb728925ca43Affected
e620a1e061c4738e26c3edf2abaae7842532cd80 to before 24307866e0ac0a5ddb462e766ceda5e27a6fbbe3Affected
e620a1e061c4738e26c3edf2abaae7842532cd80 to before a1500b98cd81a32fdfb9bc63c33bb9f0c2a0a1bfAffected
e620a1e061c4738e26c3edf2abaae7842532cd80 to before 157de9e48007a20c65d02fc0229a16f38134a72dAffected
e620a1e061c4738e26c3edf2abaae7842532cd80 to before d19d7345a7bcdb083b65568a11b11adffe0687afAffected

LinuxLinux

5.5Affected
before 5.5Not affected
5.10.236 through 5.10.*Not affected
5.15.180 through 5.15.*Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.