CVEvulnerability
CVE-2025-39909
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-01
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-369
Description
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
Patch series "mm/damon: avoid divide-by-zero in DAMON module's parameters
application".
DAMON's RECLAIM and LRU_SORT modules perform no validation on
user-configured parameters during application, which may lead to
division-by-zero errors.
Avoid the divide-by-zero by adding validation checks when DAMON modules
attempt to apply the parameters.
This patch (of 2):
During the calculation of 'hot_thres' and 'cold_thres', either
'sample_interval' or 'aggr_interval' is used as the divisor, which may
lead to division-by-zero errors. Fix it by directly returning -EINVAL
when such a case occurs. Additionally, since 'aggr_interval' is already
required to be set no smaller than 'sample_interval' in damon_set_attrs(),
only the case where 'sample_interval' is zero needs to be checked.
Affected configurations
• linux linux kernel (>= 6.0 < 6.1.153)
• linux linux kernel (>= 6.2 < 6.6.107)
• linux linux kernel (>= 6.7 < 6.12.48)
• linux linux kernel (>= 6.13 < 6.16.8)
• linux linux kernel 6.17
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-369 Divide By Zero weakness
References
- https://git.kernel.org/stable/c/326a4b3750c71af3f3c52399ec4dbe33b6da4c26 Patch
- https://git.kernel.org/stable/c/711f19dfd783ffb37ca4324388b9c4cb87e71363 Patch
- https://git.kernel.org/stable/c/74e391f7da7d9d5235a3cca88ee9fc18f720c75b Patch
- https://git.kernel.org/stable/c/7bb675c9f0257840d33e5d1337d7e3afdd74a6bf Patch
- https://git.kernel.org/stable/c/af0ae62b935317bed1a1361c8c9579db9d300e70 Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory