CVE-2026-43175 clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
A buffer overflow in the Linux kernel rs9 clock driver allows out-of-bounds writes, potentially causing system crashes or arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43175?
CVE-2026-43175 is a medium-severity memory corruption vulnerability in Linux kernel, published on 6 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
The 9FGV0841 has 8 outputs and registers 8 struct clk_hw, make sure there are 8 slots for those newly registered clk_hw pointers, else there is going to be out of bounds write when pointers 4..7 are set into struct rs9_driver_data .clk_dif[4..7] field.
Since there are other structure members past this struct clk_hw pointer array, writing to .clk_dif[4..7] fields corrupts both the struct rs9_driver_data content and data around it, sometimes without crashing the kernel. However, the kernel does surely crash when the driver is unbound or during suspend.
Fix this, increase the struct clk_hw pointer array size to the maximum output count of 9FGV0841, which is the biggest chip that is supported by this driver.
Weakness: CWE-476
Which versions are affected by CVE-2026-43175?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43175?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-43175 being exploited?
There is no known exploitation of CVE-2026-43175 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43175, DEBIAN-CVE-2026-43175, GHSA-7x44-cvrw-474f, ROOT-OS-UBUNTU-2404-CVE-2026-43175, UBUNTU-CVE-2026-43175.