PT-2025-29017 · Linux+4 · Linux Kernel+4

Published 2025-04-18 · Updated 2026-03-06 · CVE-2025-38297

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A potential division-by-zero error exists in the em compute costs() function within the Linux kernel’s power management (PM) and energy management (EM) subsystems. This occurs when a non-CPU device’s table[i].performance is not initialized in the em init performance() function, leading to a division-by-zero error during cost calculation in em compute costs(). The 'cost' algorithm is used solely for Enhanced Adaptive Scaling (EAS) energy efficiency calculations and is not currently used by other device drivers.

Recommendations: Add the is cpu device(dev) check to prevent this division-by-zero issue.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BDU:2025-08626

CVE-2025-38297

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 666

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38297.json · Exploit
• https://ubuntu.com/security/CVE-2025-38163 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38062 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38047 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-38297 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38291 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38176 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38112 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7789-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38143 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-38297 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38281 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38109 · Vendor Advisory