| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025052044-CVE-2025-37937-3de0@gregkh> Date: Tue, 20 May 2025 17:34:45 +0200 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...nel.org> Subject: CVE-2025-37937: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() From: Greg Kroah-Hartman <gregkh@...nel.org> Description =========== In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000_set_dds()'s call to dib8000_read32() returns zero, the result is a divide-by-zero. Prevent that from happening. Fixes the following warning with an UBSAN kernel: drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx() The Linux kernel CVE team has assigned CVE-2025-37937 to this issue. Affected and fixed versions =========================== Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 5.4.292 with commit 536f7f3595ef8187cfa9ea50d7d24fcf4e84e166 Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 5.10.236 with commit 976a85782246a29ba0f6d411a7a4f524cb9ea987 Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 5.15.180 with commit 9b76b198cf209797abcb1314c18ddeb90fe0827b Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 6.1.134 with commit b9249da6b0ed56269d4f21850df8e5b35dab50bd Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 6.6.87 with commit 75b42dfe87657ede3da3f279bd6b1b16d69af954 Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 6.12.23 with commit cd80277f652138d2619f149f86ae6d17bce721d1 Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 6.13.11 with commit c8430e72b99936c206b37a8e2daebb3f8df7f2d8 Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 6.14.2 with commit 6cfe46036b163e5a0f07c6b705b518148e1a8b2f Issue introduced in 3.10 with commit 173a64cb3fcff1993b2aa8113e53fd379f6a968f and fixed in 6.15-rc1 with commit e63d465f59011dede0a0f1d21718b59a64c3ff5c Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2025-37937 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/media/dvb-frontends/dib8000.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/536f7f3595ef8187cfa9ea50d7d24fcf4e84e166 https://git.kernel.org/stable/c/976a85782246a29ba0f6d411a7a4f524cb9ea987 https://git.kernel.org/stable/c/9b76b198cf209797abcb1314c18ddeb90fe0827b https://git.kernel.org/stable/c/b9249da6b0ed56269d4f21850df8e5b35dab50bd https://git.kernel.org/stable/c/75b42dfe87657ede3da3f279bd6b1b16d69af954 https://git.kernel.org/stable/c/cd80277f652138d2619f149f86ae6d17bce721d1 https://git.kernel.org/stable/c/c8430e72b99936c206b37a8e2daebb3f8df7f2d8 https://git.kernel.org/stable/c/6cfe46036b163e5a0f07c6b705b518148e1a8b2f https://git.kernel.org/stable/c/e63d465f59011dede0a0f1d21718b59a64c3ff5c
Powered by blists - more mailing lists