Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-21898

ftrace: Avoid potential division by zero in function_stat_show()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.291, 3.17, 4.5, 4.10, 4.15, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in function_stat_show() Check whether denominator expression x * (x - 1) * 1000 mod {2^32, 2^64} produce zero and skip stddev computation in that case. For now don't care about rec->counter * rec->counter overflow because rec->time * rec->time overflow will likely happen earlier.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 5.4.9 · fixed in 5.4.291; From 3.16.83 · fixed in 3.17; From 4.4.209 · fixed in 4.5; From 4.9.209 · fixed in 4.10; From 4.14.163 · fixed in 4.15; From 4.19.94 · fixed in 4.20

  • Linux Linux

    5.5

References 8

git.kernel.org