CVE-2025-37850

Severity CVSS v4.0:
Pending analysis
Type:
CWE-369 Divide By Zero
Publication date:
09/05/2025
Last modified:
17/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()<br /> <br /> With CONFIG_COMPILE_TEST &amp;&amp; !CONFIG_HAVE_CLK, pwm_mediatek_config() has a<br /> divide-by-zero in the following line:<br /> <br /> do_div(resolution, clk_get_rate(pc-&gt;clk_pwms[pwm-&gt;hwpwm]));<br /> <br /> due to the fact that the !CONFIG_HAVE_CLK version of clk_get_rate()<br /> returns zero.<br /> <br /> This is presumably just a theoretical problem: COMPILE_TEST overrides<br /> the dependency on RALINK which would select COMMON_CLK. Regardless it&amp;#39;s<br /> a good idea to check for the error explicitly to avoid divide-by-zero.<br /> <br /> Fixes the following warning:<br /> <br /> drivers/pwm/pwm-mediatek.o: warning: objtool: .text: unexpected end of section<br /> <br /> [ukleinek: s/CONFIG_CLK/CONFIG_HAVE_CLK/]

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.12 (including) 5.4.293 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.237 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.181 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.135 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.88 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.24 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.13.12 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.14 (including) 6.14.3 (excluding)
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*