Division by Zero Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2025-38297: In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of a non-CPU type, table[i].performance won't be initialized in th... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various devices, from servers to embedded systems. The kernel's performance and stability are critical for the overall functionality of the operating system. This vulnerability specifically affects the energy efficiency calculations within the kernel, which can impact system performance under certain conditions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the function em_compute_costs(), where a potential division-by-zero error can occur. This issue arises when the device being evaluated is not of a CPU type, leading to uninitialized performance metrics. As a result, the algorithm used for calculating costs may produce erroneous results, potentially affecting energy efficiency calculations. This vulnerability is particularly concerning as it could lead to unexpected behavior in systems relying on these calculations for performance optimization.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, ensuring that your system is updated to the latest version of the Linux kernel is the best practice to avoid potential issues.
Conclusion
The division by zero vulnerability in the Linux kernel poses a risk to system performance and stability, particularly in energy efficiency calculations. Updating to the patched version 6.12.35-1 or later is essential to mitigate this risk. Regular updates and monitoring for vulnerabilities are crucial for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a potential division-by-zero error in the Linux kernel's energy efficiency calculation function, which can lead to system instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Failure to address this vulnerability may result in incorrect energy efficiency calculations, leading to suboptimal performance and potential system instability.
While the primary concern is system performance, there is no direct indication that this vulnerability leads to data loss. However, erratic behavior could indirectly affect data integrity.
It is advisable to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
