CVE-2025-38297: PM: EM: Fix potential division-by-zero error in em_compute_costs()
In the Linux kernel, the following vulnerability has been resolved:
PM: EM: Fix potential division-by-zero error in emcomputecosts()
When the device is of a non-CPU type, table[i].performance won't be initialized in the previous eminitperformance(), resulting in division by zero when calculating costs in emcomputecosts().
Since the 'cost' algorithm is only used for EAS energy efficiency calculations and is currently not utilized by other device drivers, we should add the iscpudevice(dev) check to prevent this division-by-zero issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38297?
The severity of CVE-2025-38297 is classified as medium due to potential denial of service risks.
How do I fix CVE-2025-38297?
To fix CVE-2025-38297, update your Linux kernel to the latest version that includes the fix for this vulnerability.
What causes CVE-2025-38297?
CVE-2025-38297 is caused by an uninitialized performance value leading to a potential division-by-zero error in the em_compute_costs function.
Which versions of Linux Kernel are affected by CVE-2025-38297?
CVE-2025-38297 affects all versions of the Linux kernel prior to the patch release that resolves this division-by-zero error.
What are the potential impacts of CVE-2025-38297?
The potential impacts of CVE-2025-38297 include system crashes or instability resulting from the division-by-zero vulnerability.