CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2025-38583
Medium (5.5). EPSS 0.2% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved:
clk: xilinx: vcu: unregister pll_post only if registered correctly
If registration of pll_post is failed, it will be set to NULL or ERR,
unregistering same will fail with following call trace:
Unable to handle kernel NULL pointer dereference at virtual address 008
pc : clk_hw_unregister+0xc/0x20
lr : clk_hw_unregister_fixed_factor+0x18/0x30
sp : ffff800011923850
...
Call trace:
clk_hw_unregister+0xc/0x20
clk_hw_unregister_fixed_factor+0x18/0x30
xvcu_unregister_clock_provider+0xcc/0xf4 [xlnx_vcu]
xvcu_probe+0x2bc/0x53c [xlnx_vcu]
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- linux:linux_kernel
References
- https://git.kernel.org/stable/c/3b0abc443ac22f7d4f61ddbbbbc5dbb06c87139d
- https://git.kernel.org/stable/c/51990eecf22f446550befdfd1a9f54147eafd636
- https://git.kernel.org/stable/c/7e903da71f8bec4beb7c06707900e1ed8db843ca
- https://git.kernel.org/stable/c/86124c5cfceb5ac04d2fddbf1b6f7147332d96a3
- https://git.kernel.org/stable/c/88bd875b7f9c3652c27d6e4bb7a23701b764f762