CVE-2025-38297

Description

In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of a non-CPU type, table[i].performance won't be initialized in the previous em_init_performance(), resulting in division by zero when calculating costs in em_compute_costs(). Since the 'cost' algorithm is only used for EAS energy efficiency calculations and is currently not utilized by other device drivers, we should add the _is_cpu_device(dev) check to prevent this division-by-zero issue.

Reserved 2025-04-16 | Published 2025-07-10 | Updated 2025-07-10 | Assigner Linux

Product status

Default status
unaffected

1b600da510735a0f92c8b4140a7e2cb037a6a6c3 before 81d72f9241d884ec29524431f74f8009310cfa0c
affected

1b600da510735a0f92c8b4140a7e2cb037a6a6c3 before 14cbdd64f3870cf0a2d94b87919b9056448c59a0
affected

1b600da510735a0f92c8b4140a7e2cb037a6a6c3 before 179c0c7044a378198adb36f2a12410ab68cc730a
affected

Default status
affected

6.9
affected

Any version before 6.9
unaffected

6.12.34
unaffected

6.15.3
unaffected

6.16-rc1
unaffected

References

git.kernel.org/...c/81d72f9241d884ec29524431f74f8009310cfa0c

git.kernel.org/...c/14cbdd64f3870cf0a2d94b87919b9056448c59a0

git.kernel.org/...c/179c0c7044a378198adb36f2a12410ab68cc730a

cve.org (CVE-2025-38297)

nvd.nist.gov (CVE-2025-38297)

Download JSON