CVE-2026-93263

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the Linux kernel, the functions eswin clk register pll() and eswin register clkdiv() declare a clk init data structure on the stack but only initialize specific fields, namely parent data and parent hws. Because clk core populate parent map() evaluates parent names and parent data before parent hws, uninitialized stack memory can interfere with parent resolution. This leads the clock core to dereference an invalid pointer, resulting in a kernel NULL pointer dereference. This issue was observed on EIC7700 hardware, and its occurrence depends on the contents of the stack during the execution of registration helpers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.