CVE-2025-21874

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21874

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: dm-integrity: Avoid divide by zero in table status in Inline mode In Inline mode, the journal is unused, and journal_sectors is zero. Calculating the journal watermark requires dividing by journal_sectors, which should be done only if the journal is configured. Otherwise, a simple table query (dmsetup table) can cause OOPS. This bug did not show on some systems, perhaps only due to compiler optimization. On my 32-bit testing machine, this reliably crashes with the following: : Oops: divide error: 0000 [#1] PREEMPT SMP : CPU: 0 UID: 0 PID: 2450 Comm: dmsetup Not tainted 6.14.0-rc2+ #959 : EIP: dm_integrity_status+0x2f8/0xab0 [dm_integrity] ...

References
Link Resource
https://git.kernel.org/stable/c/06d9895f265282e939a8933bb18de82eba2b4dda Patch
https://git.kernel.org/stable/c/22c6f577b3cb184857b440ae5e5916f6c9e7021d Patch
https://git.kernel.org/stable/c/7fb39882b20c98a9a393c244c86b56ef6933cff8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
History

30 Oct 2025, 16:12

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/06d9895f265282e939a8933bb18de82eba2b4dda - () https://git.kernel.org/stable/c/06d9895f265282e939a8933bb18de82eba2b4dda - Patch
References () https://git.kernel.org/stable/c/22c6f577b3cb184857b440ae5e5916f6c9e7021d - () https://git.kernel.org/stable/c/22c6f577b3cb184857b440ae5e5916f6c9e7021d - Patch
References () https://git.kernel.org/stable/c/7fb39882b20c98a9a393c244c86b56ef6933cff8 - () https://git.kernel.org/stable/c/7fb39882b20c98a9a393c244c86b56ef6933cff8 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-369
CPE cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm-integrity: Evitar la división por cero en el estado de la tabla en modo en línea. En modo en línea, el diario no se utiliza y journal_sectors es cero. Calcular la marca de agua del diario requiere dividir por journal_sectors, lo cual solo debe hacerse si el diario está configurado. De lo contrario, una simple consulta de tabla (dmsetup table) puede causar un error OOPS. Este error no se presentó en algunos sistemas, quizás solo debido a la optimización del compilador. En mi equipo de pruebas de 32 bits, esto falla de forma fiable con el siguiente error: : Oops: divide error: 0000 [#1] PREEMPT SMP : CPU: 0 UID: 0 PID: 2450 Comm: dmsetup Not tainted 6.14.0-rc2+ #959 : EIP: dm_integrity_status+0x2f8/0xab0 [dm_integrity] ...
First Time Linux linux Kernel
Linux

27 Mar 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-27 15:15

Updated : 2025-10-30 16:12

NVD link : CVE-2025-21874

Mitre link : CVE-2025-21874

CVE.ORG link : CVE-2025-21874

JSON object : View

Products Affected

linux

CWE
CWE-369

Divide By Zero