CVE-2018-10074: The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4....

Security readout for executives and security teams

This is an older Linux kernel issue that can let a local user crash affected systems through a NULL pointer dereference. The source evidence points to denial of service, not data theft or remote compromise. Business urgency is mainly for devices using the Hisilicon hi3660 clock driver on kernels before 4.16. Exposure appears narrow: Linux systems before 4.16 that include and use the Hisilicon hi3660 stub clock driver. General servers are unlikely to be affected unless they run this platform-specific kernel code. Vendor backports may change version-based assessment. Handle through normal vulnerability management unless the organization operates affected Hisilicon-based Linux devices with local multi-user access. The likely impact is service disruption, and current source evidence does not support emergency treatment. Mitigation focus: Upgrade to a vendor-supported kernel containing the upstream fix or equivalent backport.; Review the referenced Linux commit for the exact upstream code change.; Prioritize systems where untrusted local users can access affected devices..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.