CVE-2025-38297

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38297

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of a non-CPU type, table[i].performance won't be initialized in the previous em_init_performance(), resulting in division by zero when calculating costs in em_compute_costs(). Since the 'cost' algorithm is only used for EAS energy efficiency calculations and is currently not utilized by other device drivers, we should add the _is_cpu_device(dev) check to prevent this division-by-zero issue.

References
Link Resource
https://git.kernel.org/stable/c/14cbdd64f3870cf0a2d94b87919b9056448c59a0 Patch
https://git.kernel.org/stable/c/179c0c7044a378198adb36f2a12410ab68cc730a Patch
https://git.kernel.org/stable/c/81d72f9241d884ec29524431f74f8009310cfa0c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 20:13

Type Values Removed Values Added
CWE CWE-369
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/14cbdd64f3870cf0a2d94b87919b9056448c59a0 - () https://git.kernel.org/stable/c/14cbdd64f3870cf0a2d94b87919b9056448c59a0 - Patch
References () https://git.kernel.org/stable/c/179c0c7044a378198adb36f2a12410ab68cc730a - () https://git.kernel.org/stable/c/179c0c7044a378198adb36f2a12410ab68cc730a - Patch
References () https://git.kernel.org/stable/c/81d72f9241d884ec29524431f74f8009310cfa0c - () https://git.kernel.org/stable/c/81d72f9241d884ec29524431f74f8009310cfa0c - Patch

10 Jul 2025, 13:17

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PM: EM: Se corrige un posible error de división por cero en em_compute_costs(). Cuando el dispositivo no es de tipo CPU, table[i].performance no se inicializa en la función em_init_performance() anterior, lo que resulta en una división por cero al calcular los costos en em_compute_costs(). Dado que el algoritmo "cost" solo se utiliza para cálculos de eficiencia energética de EAS y actualmente no lo utilizan otros controladores de dispositivos, se debe agregar la comprobación _is_cpu_device(dev) para evitar este problema de división por cero.

10 Jul 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-10 08:15

Updated : 2025-11-19 20:13

NVD link : CVE-2025-38297

Mitre link : CVE-2025-38297

CVE.ORG link : CVE-2025-38297

JSON object : View

Products Affected

linux

CWE
CWE-369

Divide By Zero