Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2025-38519: Linux kernel may crash from division‑by‑zero error
CVE-2025-38519 · published 1 year ago
Summary
The Linux kernel’s memory‑monitoring code can try to divide by zero when it encounters a region with a size of zero, causing the system to stop unexpectedly. This problem affects any Linux kernel version that includes the damon_get_intervals_score function. Updating to a kernel that includes the latest fix will prevent the crash.
What to do
- Update linux kernel to version 6.15.7.
- Update linux linux_kernel to version 6.15.7 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 6.15, < 6.15.7 6.16 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Linux | linux | kernel |
>= 6.15.0, < 6.15.7 Fix: upgrade to 6.15.7
|
Original advisory text
mm/damon: fix divide by zero in damon_get_intervals_score()
In the Linux kernel, the following vulnerability has been resolved:
mm/damon: fix divide by zero in damon_get_intervals_score()
The current implementation allows having zero size regions with no special
reasons, but damon_get_intervals_score() gets crashed by divide by zero
when the region size is zero.
[ 29.403950] Oops: divide error: 0000 [#1] SMP NOPTI
This patch fixes the bug, but does not disallow zero size regions to keep
the backward compatibility since disallowing zero size regions might be a
breaking change for some users.
In addition, the same crash can happen when intervals_goal.access_bp is
zero so this should be fixed in stable trees as well.
mm/damon: fix divide by zero in damon_get_intervals_score()
The current implementation allows having zero size regions with no special
reasons, but damon_get_intervals_score() gets crashed by divide by zero
when the region size is zero.
[ 29.403950] Oops: divide error: 0000 [#1] SMP NOPTI
This patch fixes the bug, but does not disallow zero size regions to keep
the backward compatibility since disallowing zero size regions might be a
breaking change for some users.
In addition, the same crash can happen when intervals_goal.access_bp is
zero so this should be fixed in stable trees as well.
References
- https://git.kernel.org/stable/c/bd225b9591442065beb876da72656f4a2d627d03 URL
- https://git.kernel.org/stable/c/ca4bb9ac706f05ead8ac1cce7b8245fc0645a687 URL
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38519... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-38519 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-369Divide By Zero
Timeline
Published16 Aug 2025
Updated26 Oct 2026
First seen7 Mar 2026
Track software like this
Free during beta