CVE-2025-38719
BaseFortify
Publication date: 2025-09-04
Last updated on: 2025-12-02
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-369 | The product divides a value by zero. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a division by zero issue in the Linux kernel's net: hibmcge driver. When the network port is down, the queue is released and the ring length becomes zero. In debugfs, the function hbg_get_queue_used_num() is called, which may perform a division by zero if ring->len is zero. The patch fixes this by adding a check to return zero immediately if ring->len is zero, preventing the division by zero error.
How can this vulnerability impact me? :
This vulnerability can cause a division by zero error in the Linux kernel's network driver, which may lead to kernel crashes or instability when the network port is down and debugfs queries the queue usage. This could potentially disrupt network functionality or system stability.