Linux Kernel Affected by Clock Initialization Vulnerability

CVE-2026-93249

What is CVE-2026-93249?

A vulnerability in the Linux kernel's handling of clock initialization can lead to system crashes due to uninitialized members within the clk_init_data structure. Specifically, the aml_spisg_clk_init() function assumes that the parent_names member is NULL, but if it is left uninitialized, it can result in unpredictable behavior and crashes under certain configurations. Proper initialization of all members is crucial to avoid subtle bugs and ensure consistent performance across clock specifications.

References