CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: make sure that ptprate is not 0 before configuring EST
If the ptprate recorded earlier in the driver happens to be 0, this bogus value will propagate up to EST configuration, where it will trigger a division by 0.
Prevent this division by 0 by adding the corresponding check and error code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the net: stmmac driver, add a check so that ptp_rate is not 0 before configuring EST to prevent division by 0.
Linux kernel (net: stmmac) ptp_rate = ptp_rate != 0 before configuring EST
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38125?
CVE-2025-38125 has a moderate severity level due to potential issues in the EST configuration that could arise from incorrect ptp_rate values.
How do I fix CVE-2025-38125?
To fix CVE-2025-38125, update your Linux kernel to the version containing the patch that validates ptp_rate before configuring EST.
What software is affected by CVE-2025-38125?
CVE-2025-38125 affects the Linux kernel, specifically the implementation related to the stmmac driver.
What is the impact of CVE-2025-38125?
The impact of CVE-2025-38125 may include misconfiguration of the EST that could lead to unexpected behavior in network time sensitive applications.
When was CVE-2025-38125 disclosed?
CVE-2025-38125 was disclosed as part of a series of patches for the Linux kernel addressing related vulnerabilities.