Bug 2360932 (CVE-2025-39728) - CVE-2025-39728 kernel: clk: samsung: Fix UBSAN panic in samsung_clk_init()
Summary: CVE-2025-39728 kernel: clk: samsung: Fix UBSAN panic in samsung_clk_init()
Keywords:
Status: NEW
Alias: CVE-2025-39728
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-04-18 08:01 UTC by OSIDB Bzimport
Modified: 2025-04-18 12:57 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-04-18 08:01:48 UTC
In the Linux kernel, the following vulnerability has been resolved:

clk: samsung: Fix UBSAN panic in samsung_clk_init()

With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due to
dereferencing `ctx->clk_data.hws` before setting
`ctx->clk_data.num = nr_clks`. Move that up to fix the crash.

  UBSAN: array index out of bounds: 00000000f2005512 [#1] PREEMPT SMP
  <snip>
  Call trace:
   samsung_clk_init+0x110/0x124 (P)
   samsung_clk_init+0x48/0x124 (L)
   samsung_cmu_register_one+0x3c/0xa0
   exynos_arm64_register_cmu+0x54/0x64
   __gs101_cmu_top_of_clk_init_declare+0x28/0x60
   ...

Comment 1 Avinash Hanwate 2025-04-18 12:51:36 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025041820-CVE-2025-39728-8713@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.