CVE-2025-38519
MEDIUM EPSS 2.1%
Published Aug 16, 202510mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published Aug 16, 2025 10mo ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: mm/damon: fix divide by zero in damon_get_intervals_score() The current implementation allows having zero size regions with no special reasons, but damon_get_intervals_score() gets crashed by divide by zero when the region size is zero. [ 29.403950] Oops: divide error: 0000 [#1] SMP NOPTI This patch fixes the bug, but does not disallow zero size regions to keep the backward compatibility since disallowing zero size regions might be a breaking change for some users. In addition, the same crash can happen when intervals_goal.access_bp is zero so this should be fixed in stable trees as well.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
2.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-369
Affected Products 6
References 2
- git.kernel.org https://git.kernel.org/stable/c/bd225b9591442065beb876da72656f4a2d627d03
- git.kernel.org https://git.kernel.org/stable/c/ca4bb9ac706f05ead8ac1cce7b8245fc0645a687
Remediation
- git.kernel.org https://git.kernel.org/stable/c/bd225b9591442065beb876da72656f4a2d627d03
- git.kernel.org https://git.kernel.org/stable/c/ca4bb9ac706f05ead8ac1cce7b8245fc0645a687