clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.19 % · centile 8 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() Smatch detected this potential error pointer dereference clk_wzrd_register_divider(). If devm_clk_hw_register() fails then it sets "hw" to an error pointer and then dereferences it on the next line. Return the error directly instead.
Références
- https://git.kernel.org/stable/c/2f276dd9c0f835242836d9f6823035158ce2585c
- https://git.kernel.org/stable/c/b35cb0c05b8dafe23ae5e8b605a91b88bcf4aba7
- https://git.kernel.org/stable/c/25dbdfb7b71ef8601d00c6d9a2b1a96de28b30c5
- https://git.kernel.org/stable/c/f078a65ebf930f4305e3c415a8338d22391642c9
- https://git.kernel.org/stable/c/9c632a6396505a019ea6d12b5ab45e659a542a93
Références européennes
- ENISA EUVD · EUVD-2023-60099
- GCVE · GCVE-0-2023-53807
Avis du CERT-FR
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 5a853722eb32188647a541802d51d0db423b9baf < 2f276dd9c0f835242836d9f6823035158ce2585c ; affected 5a853722eb32188647a541802d51d0db423b9baf < b35cb0c05b8dafe23ae5e8b605a91b88bcf4aba7 ; affected 5a853722eb32188647a541802d51d0db423b9baf < 25dbdfb7b71ef8601d00c6d9a2b1a96de28b30c5 ; affected 5a853722eb32188647a541802d51d0db423b9baf < f078a65ebf930f4305e3c415a8338d22391642c9 ; affected 5a853722eb32188647a541802d51d0db423b9baf < 9c632a6396505a019ea6d12b5ab45e659a542a93 |
| Linux · Linux | affected 5.13 ; unaffected 0 < 5.13 ; unaffected 5.15.121 ≤ 5.15.* ; unaffected 6.1.39 ≤ 6.1.* ; unaffected 6.3.13 ≤ 6.3.* ; unaffected 6.4.4 ≤ 6.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |