CVE-2025-40127

hwrng: ks-sa - fix division by zero in ks_sa_rng_init

State: Published
Severity: Not scored
Published: Nov 12, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

hwrng: ks-sa - fix division by zero in ks_sa_rng_init

Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer, resulting in division by zero when calculating delay values.

Add clock initialization code before using the clock.

drivers/char/hw_random/ks-sa-rng.c | 7 +++++++ 1 file changed, 7 insertions(+)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 692a04a1e0cde1d80a33df0078c755cf02cd7268Affected 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before d76b099011fa056950f63d05ebb6160991242f6aAffected 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before eec7e0e19c1fa75dc65e25aa6a21ef24a03849afAffected 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before f4238064379a91e71a9c258996acac43c50c2094Affected 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2Affected 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2Affected 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 612b1dfeb414dfa780a6316014ceddf9a74ff5c0Affected
LinuxLinux	5.5Affected before 5.5Not affected 5.10.246 through 5.10.Not affected 5.15.195 through 5.15.Not affected 6.1.156 through 6.1.Not affected 6.6.112 through 6.6.Not affected 6.12.53 through 6.12.Not affected 6.17.3 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 692a04a1e0cde1d80a33df0078c755cf02cd7268Affected
6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before d76b099011fa056950f63d05ebb6160991242f6aAffected
6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before eec7e0e19c1fa75dc65e25aa6a21ef24a03849afAffected
6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before f4238064379a91e71a9c258996acac43c50c2094Affected
6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2Affected
6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2Affected
6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 612b1dfeb414dfa780a6316014ceddf9a74ff5c0Affected

LinuxLinux

5.5Affected
before 5.5Not affected
5.10.246 through 5.10.*Not affected
5.15.195 through 5.15.*Not affected
6.1.156 through 6.1.*Not affected
6.6.112 through 6.6.*Not affected
6.12.53 through 6.12.*Not affected
6.17.3 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.