CVE-2025-40127: linux
Vulnerability summary
CVE-2025-40127 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 46 · Related 44Timeline
- 12-11-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer, resulting in division by zero when calculating delay values. Add clock initialization code before using the clock. drivers/char/hw_random/ks-sa-rng.c | 7 +++++++ 1 file changed, 7 insertions(+)
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
+0.02 pp
From 0.21% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu141 products
- linux< 5.15.0-170.180 | < 6.8.0-106.106 | < 6.17.0-14.14
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1100.107 | < 6.8.0-1050.53 | < 6.17.0-1007.7
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.158-1 | < 6.12.57-1 | < 6.17.6-1
Linux1 product
- linux≥ 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 692a04a1e0cde1d80a33df0078c755cf02cd7268 | ≥ 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < d76b099011fa056950f63d05ebb6160991242f6a | ≥ 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < eec7e0e19c1fa75dc65e25aa6a21ef24a03849af | ≥ 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < f4238064379a91e71a9c258996acac43c50c2094 | ≥ 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2 | ≥ 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2 | ≥ 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b, < 612b1dfeb414dfa780a6316014ceddf9a74ff5c0 | 5.5
3 vendors · 143 products
