In the Linux kernel, the following vulnerability has been resolved:
clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
Base clocks are the first in being probed and are real dependencies of the rest of fixed, factor and peripheral clocks. For old ralink SoCs RT2880, RT305x and RT3883 'xtal' must be defined first since in any other case, when fixed clocks are probed they are delayed until 'xtal' is probed so the following warning appears:
WARNING: CPU: 0 PID: 0 at drivers/clk/ralink/clk-mtmips.c:499 rt3883_bus_recalc_rate+0x98/0x138 Modules linked in: CPU: 0 PID: 0 Comm: swapper Not tainted 6.6.43 #0 Stack : 805e58d0 00000000 00000004 8004f950 00000000 00000004 00000000 00000000 80669c54 80830000 80700000 805ae570 80670068 00000001 80669bf8 00000000 00000000 00000000 805ae570 80669b38 00000020 804db7dc 00000000 00000000 203a6d6d 80669b78 80669e48 70617773 00000000 805ae570 00000000 00000009 00000000 00000001 00000004 00000001 00000000 00000000 83fe43b0 00000000 ... Call Trace: [<800065d0>] show_stack+0x64/0xf4 [<804bca14>] dump_stack_lvl+0x38/0x60 [<800218ac>] __warn+0x94/0xe4 [<8002195c>] warn_slowpath_fmt+0x60/0x94 [<80259ff8>] rt3883_bus_recalc_rate+0x98/0x138 [<80254530>] __clk_register+0x568/0x688 [<80254838>] of_clk_hw_register+0x18/0x2c [<8070b910>] rt2880_clk_of_clk_init_driver+0x18c/0x594 [<8070b628>] of_clk_init+0x1c0/0x23c [<806fc448>] plat_time_init+0x58/0x18c [<806fdaf0>] time_init+0x10/0x6c [<806f9bc4>] start_kernel+0x458/0x67c
---[ end trace 0000000000000000 ]---
When this driver was mainlined we could not find any active users of old ralink SoCs so we cannot perform any real tests for them. Now, one user of a Belkin f9k1109 version 1 device which uses RT3883 SoC appeared and reported some issues in openWRT: - https://github.com/openwrt/openwrt/issues/16054
Thus, define a 'rt2880_xtal_recalc_rate()' just returning the expected frequency 40Mhz and use it along the old ralink SoCs to have a correct boot trace with no warnings and a working clock plan from the beggining.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop | Feb 20, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub