CVE-2025-39728

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 18, 2025
Updated: Apr 29, 2025
CWE ID 129

Summary

CVE-2025-39728 is a vulnerability in the Linux kernel that caused a UBSAN (Uninitialized Value Safety Analyzer) panic. The issue was identified in the 'samsung' driver and specifically in the 'samsung_clk_init()' function. The panic occurred due to dereferencing 'ctx->clk_data.hws' before properly initializing 'ctx->clk_data.num'. This led to an array index out of bounds error, resulting in a kernel panic. The issue has been resolved by moving the proper initialization of 'ctx->clk_data.num' before referencing 'ctx->clk_data.hws'.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share