CVE-2025-39909CWE-369

CVE-2025-39909

Medium · published October 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()

Patch series "mm/damon: avoid divide-by-zero in DAMON module's parameters

application".

DAMON's RECLAIM and LRU_SORT modules perform no validation on

user-configured parameters during application, which may lead to

division-by-zero errors.

Avoid the divide-by-zero by adding validation checks when DAMON modules

attempt to apply the parameters.

This patch (of 2):

During the calculation of 'hot_thres' and 'cold_thres', either

'sample_interval' or 'aggr_interval' is used as the divisor, which may

lead to division-by-zero errors. Fix it by directly returning -EINVAL

when such a case occurs. Additionally, since 'aggr_interval' is already

required to be set no smaller than 'sample_interval' in damon_set_attrs(),

only the case where 'sample_interval' is zero needs to be checked.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Weakness
CWE-369 · Divide By Zero
Published
2025-10-01T12:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 6.0, < 6.1.1536.1.153
linux/linux_kernel≥ 6.2, < 6.6.1076.6.107
linux/linux_kernel≥ 6.7, < 6.12.486.12.48
linux/linux_kernel≥ 6.13, < 6.16.86.16.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (6)
EPSS history
Timeline
  • 01 OCT 07:44Z
    mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
    cvelistv5