BaseFortify

Publication date: 2025-10-09

Last updated on: 2026-02-26

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: mp: Fix dual-divider clock rate readback When dual-divider clock support was introduced, the P divider offset was left out of the .recalc_rate readback function. This causes the clock rate to become bogus or even zero (possibly due to the P divider being 1, leading to a divide-by-zero). Fix this by incorporating the P divider offset into the calculation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-09

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2025-10-09

EPSS Evaluated

2026-07-04

NVD

CVE-2025-39954

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.17
linux	linux_kernel	From 6.15 (inc) to 6.16.9 (inc)
linux	kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-369	The product divides a value by zero.

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's clock subsystem for sunxi-ng hardware. When support for dual-divider clocks was added, the code that reads back the clock rate did not correctly include the P divider offset. As a result, the clock rate calculation could be incorrect or even zero, potentially due to a divide-by-zero error when the P divider is 1. The fix involved updating the calculation to properly incorporate the P divider offset.

Impact Analysis

This vulnerability can cause the system clock rate to be reported incorrectly or as zero, which may lead to timing issues or malfunction of hardware components relying on accurate clock rates. This could affect system stability or performance on affected hardware platforms.

Hi! I’m here to help you understand CVE-2025-39954. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70