CVE-2025-37937
Published: May 22, 2025Last modified: May 22, 2025
Description
In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000_set_dds()'s call to dib8000_read32() returns zero, the result is a divide-by-zero. Prevent that from happening. Fixes the following warning with an UBSAN kernel: drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx()
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | NONE |
| Integrity impact | NONE |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.134-r0) |
| 25 LTS | linux-lts | Fixed (6.12.41-r0) | |
| Stream | linux-lts | Fixed (6.12.41-r0) |
References
- https://git.kernel.org/stable/c/536f7f3595ef8187cfa9ea50d7d24fcf4e84e166
- https://git.kernel.org/stable/c/6cfe46036b163e5a0f07c6b705b518148e1a8b2f
- https://git.kernel.org/stable/c/75b42dfe87657ede3da3f279bd6b1b16d69af954
- https://git.kernel.org/stable/c/976a85782246a29ba0f6d411a7a4f524cb9ea987
- https://git.kernel.org/stable/c/9b76b198cf209797abcb1314c18ddeb90fe0827b
- https://git.kernel.org/stable/c/b9249da6b0ed56269d4f21850df8e5b35dab50bd
- https://git.kernel.org/stable/c/c8430e72b99936c206b37a8e2daebb3f8df7f2d8
- https://git.kernel.org/stable/c/cd80277f652138d2619f149f86ae6d17bce721d1
- https://git.kernel.org/stable/c/e63d465f59011dede0a0f1d21718b59a64c3ff5c
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html