CVE-2025-38583

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw within the clock (clk) subsystem, specifically in the xilinx VCUs. An issue exists where the pll post is improperly unregistered if its initial registration failed. This can lead to a kernel NULL pointer dereference when attempting to unregister the clock hardware, potentially causing system instability. The vulnerable code path occurs during the unregistration process of the pll post clock provider.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.