CVE-2025-71143: clk: samsung: exynos-clkout: Assign .num before accessing .hws
clk: samsung: exynos-clkout: Assign .num before accessing .hws
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In exynos_clkout_probe(), initialize the .num member of struct clk_hw_onecell_data with the number of elements before the first access to the .hws[] array.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71143?
The severity of CVE-2025-71143 is classified as medium due to its potential impact on system stability.
How do I fix CVE-2025-71143?
To fix CVE-2025-71143, you should update your Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2025-71143?
CVE-2025-71143 affects various versions of the Linux kernel prior to the implementation of the fix in the commit.
What type of vulnerability is CVE-2025-71143?
CVE-2025-71143 is a coding error vulnerability related to improper handling of the clk_hw structure in the Linux kernel.
Is CVE-2025-71143 a local or remote vulnerability?
CVE-2025-71143 is primarily a local vulnerability that can be exploited by an attacker with local access to the system.