Unix Kernel Vulnerability in Samsung Clock Initialization

CVE-2025-39728

What is CVE-2025-39728?

A vulnerability has been identified in the Linux kernel related to Samsung's clock initialization mechanism. The issue arises when the code attempts to dereference a pointer to clock data before properly initializing it, leading to a potential crash. This flaw can be triggered with the UBSAN_ARRAY_BOUNDS option enabled, causing the system to panic due to an attempt to access an array index that exceeds its bounds. Proper adjustments have been made in the code to ensure safe initialization and prevent such crashes.

References