CVE-2025-39909: mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/lrusort: avoid divide-by-zero in damonlrusortapplyparameters()
Patch series "mm/damon: avoid divide-by-zero in DAMON module's parameters application".
DAMON's RECLAIM and LRUSORT modules perform no validation on user-configured parameters during application, which may lead to division-by-zero errors.
Avoid the divide-by-zero by adding validation checks when DAMON modules attempt to apply the parameters.
This patch (of 2):
During the calculation of 'hotthres' and 'coldthres', either 'sampleinterval' or 'aggrinterval' is used as the divisor, which may lead to division-by-zero errors. Fix it by directly returning -EINVAL when such a case occurs. Additionally, since 'aggrinterval' is already required to be set no smaller than 'sampleinterval' in damonsetattrs(), only the case where 'sampleinterval' is zero needs to be checked.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39909?
CVE-2025-39909 is classified as a low-severity vulnerability.
How do I fix CVE-2025-39909?
To fix CVE-2025-39909, update the Linux kernel to the latest patched version that resolves this vulnerability.
What components are affected by CVE-2025-39909?
CVE-2025-39909 affects the DAMON module's RECLAIM and LRU_SORT components in the Linux kernel.
What impact does CVE-2025-39909 have on system performance?
CVE-2025-39909 may cause a divide-by-zero error in specific memory management scenarios, potentially leading to instability.
When was CVE-2025-39909 disclosed?
CVE-2025-39909 was disclosed in 2025 as part of a patch series for the Linux kernel.