cbcvebase.
CVE-2025-40127
published 2025-11-12

CVE-2025-40127: In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in…

PriorityP421high7.8
EPSS
0.21%
10.9th percentile
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer, resulting in division by zero when calculating delay values. Add clock initialization code before using the clock. drivers/char/hw_random/ks-sa-rng.c | 7 +++++++ 1 file changed, 7 insertions(+)

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
debianlinux-6.1< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
linuxlinux
linuxlinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b < 692a04a1e0cde1d80a33df0078c755cf02cd7268692a04a1e0cde1d80a33df0078c755cf02cd7268
linuxlinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b < d76b099011fa056950f63d05ebb6160991242f6ad76b099011fa056950f63d05ebb6160991242f6a
linuxlinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b < eec7e0e19c1fa75dc65e25aa6a21ef24a03849afeec7e0e19c1fa75dc65e25aa6a21ef24a03849af
linuxlinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b < f4238064379a91e71a9c258996acac43c50c2094f4238064379a91e71a9c258996acac43c50c2094
linuxlinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b < 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e22b6bcce32cb5aff84588a844a4d3f6dd5353b8e2
linuxlinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b < 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf255a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2
linuxlinux>= 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b < 612b1dfeb414dfa780a6316014ceddf9a74ff5c0612b1dfeb414dfa780a6316014ceddf9a74ff5c0
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.158-16.1.158-1
linuxlinux_kernel>= 0 < 6.12.57-16.12.57-1
linuxlinux_kernel>= 0 < 6.17.6-16.17.6-1
linuxlinux_kernel>= 0 < 5.15.0-170.1805.15.0-170.180
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 0 < 6.17.0-14.146.17.0-14.14
linuxlinux_kernel>= 5.11.0 < 5.15.1955.15.195
linuxlinux_kernel>= 5.16.0 < 6.1.1566.1.156
linuxlinux_kernel>= 5.5.0 < 5.10.2465.10.246
linuxlinux_kernel>= 6.13.0 < 6.17.36.17.3
linuxlinux_kernel>= 6.2.0 < 6.6.1126.6.112
linuxlinux_kernel>= 6.7.0 < 6.12.536.12.53
ubuntulinux-aws
ubuntulinux-azure-5.15

CVSS provenance

osv7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.