Division by Zero Vulnerability in Linux Kernel (CVE-2025-37771)
Summary
CVE-2025-37771: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system, including process management, memory management, and device control. The kernel is highly modular and supports a wide range of hardware architectures. This vulnerability specifically affects the AMD Direct Rendering Manager (DRM) within the kernel, which is responsible for managing graphics processing units (GPUs) and rendering graphics.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AMD Direct Rendering Manager (DRM) related to speed value settings. Users can set any speed value, and if this value exceeds UINT_MAX/8, it can lead to a division by zero error. This flaw can cause system crashes or unpredictable behavior, potentially allowing attackers to exploit the vulnerability for denial-of-service attacks or other malicious activities. The issue was discovered by the Linux Verification Center and is critical for maintaining system stability and security.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
The CVE-2025-37771 vulnerability in the Linux kernel poses significant risks related to system stability and security. Users are advised to update their systems to the patched version as soon as it is available. Regular monitoring for updates and utilizing tools like Vulert can help ensure that systems remain secure against such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37771 is a vulnerability in the Linux kernel's AMD Direct Rendering Manager that can lead to a division by zero error when speed values exceed a certain threshold.
This vulnerability can cause system crashes or unpredictable behavior, which may be exploited for denial-of-service attacks.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds, it is crucial to monitor for updates and apply them as soon as they are available to minimize risks.
The vulnerability was discovered by the Linux Verification Center, an organization focused on testing and verifying Linux systems.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
