CVE-2025-37937

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()

If dib8000_set_dds()'s call to dib8000_read32() returns zero, the result is a divide-by-zero. Prevent that from happening.

Fixes the following warning with an UBSAN kernel:

drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx()

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < 536f7f3595ef8187cfa9ea50d7d24fcf4e84e166; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < 976a85782246a29ba0f6d411a7a4f524cb9ea987; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < 9b76b198cf209797abcb1314c18ddeb90fe0827b; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < b9249da6b0ed56269d4f21850df8e5b35dab50bd; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < 75b42dfe87657ede3da3f279bd6b1b16d69af954; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < cd80277f652138d2619f149f86ae6d17bce721d1; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < c8430e72b99936c206b37a8e2daebb3f8df7f2d8; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < 6cfe46036b163e5a0f07c6b705b518148e1a8b2f; >= 173a64cb3fcff1993b2aa8113e53fd379f6a968f, < e63d465f59011dede0a0f1d21718b59a64c3ff5c
LinuxLinux3.10

References

Timeline

Published
May 20, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-379385.5In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifiCVE-2025-379395.5In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext core_relo header Update btf_ext_parse_inCVE-2025-37945.4The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Stored CCVE-2025-379405.5In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel CVE-2025-379415.5In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codecCVE-2025-379437.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi CVE-2025-379447.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process CuCVE-2025-379455.5In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylinkCVE-2025-379467.8In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has chiCVE-2025-379477.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfCVE-2025-379485.5In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malCVE-2025-379495.5In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL po
CVE-2025-37937: Medium severity, CVSS 5.5 | Vulnix