CVE-2025-40127

CVE-2025-40127

published November 12, 2025

CVSS
—
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwrng: ks-sa - fix division by zero in ks_sa_rng_init

Fix division by zero in ks_sa_rng_init caused by missing clock

pointer initialization. The clk_get_rate() call is performed on

an uninitialized clk pointer, resulting in division by zero when

calculating delay values.

Add clock initialization code before using the clock.

drivers/char/hw_random/ks-sa-rng.c | 7 +++++++

1 file changed, 7 insertions(+)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Published
2025-11-12T16:15Z
References (7)
EPSS history
Timeline
  • 12 NOV 10:23Z
    hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    cvelistv5