5.5

CVE-2025-37850: debian debian_linux Divide By Zero

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2025-37850DEBIAN-CVE-2025-37850
Published 09-05-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-37850 is a medium (CVSS 5.5) Divide By Zero vulnerability in debian debian_linux. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.30%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 42 · Related 40
DLA-4178-1DLA-4193-1SUSE-SU-2025:01964-1SUSE-SU-2025:01965-1SUSE-SU-2025:02000-1SUSE-SU-2025:02254-1

Timeline

  1. 09-05-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() With CONFIG_COMPILE_TEST && !CONFIG_HAVE_CLK, pwm_mediatek_config() has a divide-by-zero in the following line: do_div(resolution, clk_get_rate(pc->clk_pwms[pwm->hwpwm])); due to the fact that the !CONFIG_HAVE_CLK version of clk_get_rate() returns zero. This is presumably just a theoretical problem: COMPILE_TEST overrides the dependency on RALINK which would select COMMON_CLK. Regardless it's a good idea to check for the error explicitly to avoid divide-by-zero. Fixes the following warning: drivers/pwm/pwm-mediatek.o: warning: objtool: .text: unexpected end of section [ukleinek: s/CONFIG_CLK/CONFIG_HAVE_CLK/]

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.30%

Chance of exploitation in the next 30 days

Percentile

21%

Versus all other CVEs

30-day change

+0.01 pp

From 0.28% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu137 products
  • linuxAll versions (No fix recorded) | < 5.15.0-144.157 | < 6.8.0-100.100
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1088.95 | < 6.8.0-1046.49
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < 8b9f60725d74b72c238e4437c957d0217746b506 | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < e1206d8e1651c9f62e5640b69b14d925b1a0a00a | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < e3cf0c38d3ce754ad63005102fcfeb0b7ff3290b | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < f3e9cf266c2c103cf071e15d7a17e2c699fff3c5 | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < 8ddbec73ea2598d8414e8f7103241b55cf877010 | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < 4cb15042b5f3ec0474e91cf379120cc597625dbb | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < c343856ff2689ce0afef823592732fc178ef4aac | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < 77fb96dbe350e8a5ae4965ff9f6e7049f3966a6b | ≥ caf065f8fd583b43a3f95d84c8a0a0d07597963b, < 7ca59947b5fcf94e7ea4029d1bd0f7c41500a161 | 4.12
  • linux_kernel≥ 4.12, < 5.4.293 | ≥ 5.5, < 5.10.237 | ≥ 5.11, < 5.15.181 | ≥ 5.16, < 6.1.135 | ≥ 6.2, < 6.6.88 | ≥ 6.7, < 6.12.24 | ≥ 6.13, < 6.13.12 | ≥ 6.14, < 6.14.3 | 6.15:rc1

3 vendors · 141 products

References

44 links
Show all 44 references