CVE-2025-38297 Details
Description
In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of a non-CPU type, table[i].performance won't be initialized in the previous em_init_performance(), resulting in division by zero when calculating costs in em_compute_costs(). Since the 'cost' algorithm is only used for EAS energy efficiency calculations and is currently not utilized by other device drivers, we should add the _is_cpu_device(dev) check to prevent this division-by-zero issue.
A division-by-zero vulnerability has been identified in the Linux kernel's energy efficiency calculation process, specifically within the 'em_compute_costs()' function. This issue arises when the device is not of CPU type, leading to uninitialized performance data. The vulnerability occurs because the cost algorithm, used for Energy Aware Scheduling (EAS) calculations, attempts to compute costs without proper initialization, causing a potential crash or undefined behavior.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/14cbdd64f3870cf0a2d94b87919b9056448c59a0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/179c0c7044a378198adb36f2a12410ab68cc730a | kernel.org | Patch |
| https://git.kernel.org/stable/c/81d72f9241d884ec29524431f74f8009310cfa0c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-369 | Divide By Zero | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.9, < 6.12.34 >= 6.13, < 6.15.3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 19, 2025 | Initial Analysis | [email protected] |
| Jul 10, 2025 | New CVE Received | kernel.org |