CVE-2025-38297

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38297
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38297.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38297
Downstream
Published
2025-07-10T08:15:28Z
Modified
2025-08-09T20:01:27Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

PM: EM: Fix potential division-by-zero error in emcomputecosts()

When the device is of a non-CPU type, table[i].performance won't be initialized in the previous eminitperformance(), resulting in division by zero when calculating costs in emcomputecosts().

Since the 'cost' algorithm is only used for EAS energy efficiency calculations and is currently not utilized by other device drivers, we should add the iscpu_device(dev) check to prevent this division-by-zero issue.

References

Affected packages