Use of Uninitialized Variable in Linux kernel - CVE-2026-93263

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use of an uninitialized variable in the eswin_clk_register_pll() and eswin_register_clkdiv() clock-registration helpers when registering PLL and divider clocks. A local user can trigger the affected clock-registration paths to cause a denial of service.

The issue was observed on EIC7700 hardware, and triggering depends on the contents of stack memory when the registration helpers run.

Affected software

How to mitigate CVE-2026-93263

External References

• https://git.kernel.org/stable/c/011d8de504bc84402aabc1dda1cf0552fe9a5af2
• https://git.kernel.org/stable/c/1183dc2450a268a536a15da8b106ec520cdbd19f

Related Security Bulletins

• Use of Uninitialized Variable in Linux kernel clk eswin driver