Upstream information

CVE-2025-40127 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

hwrng: ks-sa - fix division by zero in ks_sa_rng_init

Fix division by zero in ks_sa_rng_init caused by missing clock
pointer initialization. The clk_get_rate() call is performed on
an uninitialized clk pointer, resulting in division by zero when
calculating delay values.

Add clock initialization code before using the clock.


drivers/char/hw_random/ks-sa-rng.c | 7 +++++++
1 file changed, 7 insertions(+)

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entry: 1253369 [NEW]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Wed Nov 12 22:19:45 2025
CVE page last modified: Wed Nov 12 22:19:45 2025