5.5

CVE-2025-21898: linux Divide By Zero

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2025-21898DEBIAN-CVE-2025-21898
Published 01-04-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2025-21898 is a medium (CVSS 5.5) Divide By Zero vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.4% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 61 · Related 59
DLA-4178-1DLA-4193-1DSA-5900-1SUSE-SU-2025:02249-1SUSE-SU-2025:02254-1SUSE-SU-2025:02307-1

Timeline

  1. 01-04-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in function_stat_show() Check whether denominator expression x * (x - 1) * 1000 mod {2^32, 2^64} produce zero and skip stddev computation in that case. For now don't care about rec->counter * rec->counter overflow because rec->time * rec->time overflow will likely happen earlier.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu137 products
  • linuxAll versions (No fix recorded) | < 5.4.0-216.236 | < 5.15.0-140.150 | < 6.8.0-84.84
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1146.156 | < 5.15.0-1084.91 | < 6.8.0-1039.41
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ f0629ee3922f10112584b1898491fecc74d98b3b, < 5b3d32f607f0478b414b16516cf27f9170cf66c8 | ≥ e31f7939c1c27faa5d0e3f14519eaf7c89e8a69d, < ca381f60a3bb7cfaa618d73ca411610bd7fc3149 | ≥ e31f7939c1c27faa5d0e3f14519eaf7c89e8a69d, < 3d738b53ed6cddb68e68c9874520a4bf846163b5 | ≥ e31f7939c1c27faa5d0e3f14519eaf7c89e8a69d, < 992775227843c9376773784b8b362add44592ad7 | ≥ e31f7939c1c27faa5d0e3f14519eaf7c89e8a69d, < f58a3f8e284d0bdf94164a8e61cd4e70d337a1a3 | ≥ e31f7939c1c27faa5d0e3f14519eaf7c89e8a69d, < 746cc474a95473591853927b3a9792a2d671155b | ≥ e31f7939c1c27faa5d0e3f14519eaf7c89e8a69d, < 9cdac46fa7e854e587eb5f393fe491b6d7a9bdf6 | ≥ e31f7939c1c27faa5d0e3f14519eaf7c89e8a69d, < a1a7eb89ca0b89dc1c326eeee2596f263291aca3 | c59e74104cfd7df3ca0b5f59f1baee9c8c28b9ef | 015f0fd0fcc338513f80044add27fa46cf71d217 | 1a2985af2a20b816a5cc41a2ddc1c4109ef6b9c6 | 7650b4b1df091815bbbbb837d308dd4154684f8a | 010a7e846d4beaf34384c40ff18d5de10106d9b4 | ≥ 5.4.9, < 5.4.291 | ≥ 3.16.83, < 3.17 | ≥ 4.4.209, < 4.5 | ≥ 4.9.209, < 4.10 | ≥ 4.14.163, < 4.15 | ≥ 4.19.94, < 4.20 | 5.5
  • linux_kernel≥ 3.16.83, < 3.17 | ≥ 4.4.206, < 4.5 | ≥ 4.9.209, < 4.10 | ≥ 4.14.163, < 4.15 | ≥ 4.19.94, < 4.20 | ≥ 5.4.9, < 5.4.291 | ≥ 5.5, < 5.10.235 | ≥ 5.11, < 5.15.179 | ≥ 5.16, < 6.1.130 | ≥ 6.2, < 6.6.81 | ≥ 6.7, < 6.12.18 | ≥ 6.13, < 6.13.6 | 6.14:rc1 | 6.14:rc2 | 6.14:rc3 | 6.14:rc4
Debian1 product
  • linux< 6.1.133-1 | < 6.12.19-1

3 vendors · 140 products

References

62 links
Show all 62 references