CVE-2025-37850

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37850
In the Linux kernel, the following vulnerability has been resolved: pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() With CONFIG_COMPILE_TEST && !CONFIG_HAVE_CLK, pwm_mediatek_config() has a divide-by-zero in the following line: do_div(resolution, clk_get_rate(pc->clk_pwms[pwm->hwpwm])); due to the fact that the !CONFIG_HAVE_CLK version of clk_get_rate() returns zero. This is presumably just a theoretical problem: COMPILE_TEST overrides the dependency on RALINK which would select COMMON_CLK. Regardless it's a good idea to check for the error explicitly to avoid divide-by-zero. Fixes the following warning: drivers/pwm/pwm-mediatek.o: warning: objtool: .text: unexpected end of section [ukleinek: s/CONFIG_CLK/CONFIG_HAVE_CLK/]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4cb15042b5f3ec0474e91cf379120cc597625dbb Patch
https://git.kernel.org/stable/c/77fb96dbe350e8a5ae4965ff9f6e7049f3966a6b Patch
https://git.kernel.org/stable/c/7ca59947b5fcf94e7ea4029d1bd0f7c41500a161 Patch
https://git.kernel.org/stable/c/8b9f60725d74b72c238e4437c957d0217746b506 Patch
https://git.kernel.org/stable/c/8ddbec73ea2598d8414e8f7103241b55cf877010 Patch
https://git.kernel.org/stable/c/c343856ff2689ce0afef823592732fc178ef4aac Patch
https://git.kernel.org/stable/c/e1206d8e1651c9f62e5640b69b14d925b1a0a00a Patch
https://git.kernel.org/stable/c/e3cf0c38d3ce754ad63005102fcfeb0b7ff3290b Patch
https://git.kernel.org/stable/c/f3e9cf266c2c103cf071e15d7a17e2c699fff3c5 Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html Mailing List
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
History

17 Nov 2025, 12:53

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4cb15042b5f3ec0474e91cf379120cc597625dbb - () https://git.kernel.org/stable/c/4cb15042b5f3ec0474e91cf379120cc597625dbb - Patch
References () https://git.kernel.org/stable/c/77fb96dbe350e8a5ae4965ff9f6e7049f3966a6b - () https://git.kernel.org/stable/c/77fb96dbe350e8a5ae4965ff9f6e7049f3966a6b - Patch
References () https://git.kernel.org/stable/c/7ca59947b5fcf94e7ea4029d1bd0f7c41500a161 - () https://git.kernel.org/stable/c/7ca59947b5fcf94e7ea4029d1bd0f7c41500a161 - Patch
References () https://git.kernel.org/stable/c/8b9f60725d74b72c238e4437c957d0217746b506 - () https://git.kernel.org/stable/c/8b9f60725d74b72c238e4437c957d0217746b506 - Patch
References () https://git.kernel.org/stable/c/8ddbec73ea2598d8414e8f7103241b55cf877010 - () https://git.kernel.org/stable/c/8ddbec73ea2598d8414e8f7103241b55cf877010 - Patch
References () https://git.kernel.org/stable/c/c343856ff2689ce0afef823592732fc178ef4aac - () https://git.kernel.org/stable/c/c343856ff2689ce0afef823592732fc178ef4aac - Patch
References () https://git.kernel.org/stable/c/e1206d8e1651c9f62e5640b69b14d925b1a0a00a - () https://git.kernel.org/stable/c/e1206d8e1651c9f62e5640b69b14d925b1a0a00a - Patch
References () https://git.kernel.org/stable/c/e3cf0c38d3ce754ad63005102fcfeb0b7ff3290b - () https://git.kernel.org/stable/c/e3cf0c38d3ce754ad63005102fcfeb0b7ff3290b - Patch
References () https://git.kernel.org/stable/c/f3e9cf266c2c103cf071e15d7a17e2c699fff3c5 - () https://git.kernel.org/stable/c/f3e9cf266c2c103cf071e15d7a17e2c699fff3c5 - Patch
References () https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html - () https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html - Mailing List
References () https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html - () https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html - Mailing List
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
First Time Debian debian Linux
Linux
Debian
Linux linux Kernel
CWE CWE-369
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

03 Nov 2025, 20:18

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html -
  • () https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html -

12 May 2025, 17:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pwm: mediatek: Evitar la división por cero en pwm_mediatek_config(). Con CONFIG_COMPILE_TEST y !CONFIG_HAVE_CLK, pwm_mediatek_config() presenta una división por cero en la siguiente línea: do_div(resolution, clk_get_rate(pc->clk_pwms[pwm->hwpwm])); debido a que la versión !CONFIG_HAVE_CLK de clk_get_rate() devuelve cero. Se supone que se trata de un problema teórico: COMPILE_TEST anula la dependencia de RALINK, que seleccionaría COMMON_CLK. En cualquier caso, es recomendable comprobar el error explícitamente para evitar la división por cero. Corrige la siguiente advertencia: drivers/pwm/pwm-mediatek.o: advertencia: objtool: .text: final inesperado de sección [ukleinek: s/CONFIG_CLK/CONFIG_HAVE_CLK/]

09 May 2025, 07:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-09 07:16

Updated : 2025-11-17 12:53

NVD link : CVE-2025-37850

Mitre link : CVE-2025-37850

CVE.ORG link : CVE-2025-37850

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-369

Divide By Zero