Critical Division by Zero Vulnerability in Linux Kernel (CVE-2025-37767)
Summary
CVE-2025-37767: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its stability, performance, and flexibility, making it a popular choice for servers, desktops, and embedded systems. This vulnerability affects the AMD Direct Rendering Manager (DRM) component of the kernel, which is responsible for managing graphics processing units (GPUs) and rendering graphics efficiently.
Vulnerability Detail
In the Linux kernel, a critical vulnerability identified as CVE-2025-37767 has been discovered in the AMD Direct Rendering Manager (DRM) component. This vulnerability arises from improper handling of speed values, allowing users to set any speed. If the speed exceeds UINT_MAX/8, it can lead to a division by zero error, potentially causing system crashes or undefined behavior. This issue was identified by the Linux Verification Center and poses a significant risk to systems utilizing affected versions of the Linux kernel.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
CVE-2025-37767 represents a significant vulnerability in the Linux kernel that can lead to serious system issues if not addressed. Users are strongly encouraged to update their systems to the latest patched versions to ensure their systems remain secure and stable.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37767 is a vulnerability in the Linux kernel's AMD Direct Rendering Manager that can lead to a division by zero error.
If exploited, this vulnerability can cause system crashes or unpredictable behavior, impacting the stability of your operating system.
You should update your Linux kernel to the patched version as soon as possible to mitigate the risk associated with this vulnerability.
Yes, you can use tools like Vulert, which monitors open-source vulnerabilities in your software using a manifest file such as package-lock.json.
You can use the Vulert playground at Vulert Scanner to check if your application is affected without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.