PT-2025-27980 · Linux+5 · Linux Kernel+5

Published 2025-01-21 · Updated 2026-04-20 · CVE-2025-38205

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A divide by zero issue has been resolved in the Linux kernel. The problem occurs when dummy values in the populate dummy dml surface cfg() function are not updated, leading to a divide by zero error in downstream callers like CalculateVMAndRowBytes(). This issue is resolved by initializing the dummy pitch to 1.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BDU:2025-15481

CVE-2025-38205

ECHO-7361-50B7-8934

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03272-1

SUSE-SU-2025:03290-1

SUSE-SU-2025:03301-1

SUSE-SU-2025:03382-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20653-1

SUSE-SU-2025:20669-1

SUSE-SU-2025:20739-1

SUSE-SU-2025:20756-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_03272-1

SUSE-SU-2025_03290-1

SUSE-SU-2025_03301-1

SUSE-SU-2025_03382-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1957

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38205.json · Exploit
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://git.kernel.org/stable/c/7e40f64896e8e3dca471e287672db5ace12ea0be · Patch
• https://ubuntu.com/security/CVE-2025-38355 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36350 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38257 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38411 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38431 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38242 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38236 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38342 · Vendor Advisory