Search/CVE-2025-71143
● CVE — High

CVE-2025-71143

VendorlinuxProductlinux kernelDiscoveredJan 14, 2026UpdatedMar 25, 2026

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate struct clk_hw_onecell_data with __counted_by") annotated the hws member of 'struct clk_hw_onecell_data' with __counted_by, which informs the bounds sanitizer (UBSAN_BOUNDS) about the number of elements in .hws[], so that it can warn when .hws[] is accessed out of bounds. As noted in that change, the __counted_by member must be initialized with the number of elements before the first array access happens, otherwise there will be a warning from each access prior to the initialization because the number of elements is zero. This occurs in exynos_clkout_probe() due to .num being assigned after .hws[] has been accessed: UBSAN:…

CVSS v3.1
7.8 HIGH
EPSS
0.14%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
15
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.02pp
0.12% → 0.14% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
17 relationships
Timeline
disclosure → media coverage
Jan 14, 2026
Disclosure — published as a CVE record. · last revised by NVD Mar 25, 2026
Apr 16, 2026
ubuntu.com reports: USN-8177-1: Linux kernel vulnerabilities
Apr 16, 2026
ubuntu.com reports: USN-8179-1: Linux kernel vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8177-2: Linux kernel (Real-time) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8183-1: Linux kernel (GCP) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8184-1: Linux kernel (Real-time) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8179-2: Linux kernel (FIPS) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8185-1: Linux kernel (NVIDIA) vulnerabilities
Apr 28, 2026
ubuntu.com reports: USN-8185-2: Linux kernel (Low Latency NVIDIA) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8179-4: Linux kernel (GCP) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8245-1: Linux kernel vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8257-1: Linux kernel (Raspberry Pi) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8258-1: Linux kernel (Azure) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8260-1: Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8261-1: Linux kernel (Xilinx) vulnerabilities
May 11, 2026
ubuntu.com reports: USN-8265-1: Linux kernel (NVIDIA Tegra) vulnerabilities