SB20250502250 - Division by zero in Linux kernel powerplay hwmgr driver
Published: May 2, 2025 Updated: May 10, 2025
Security Bulletin ID
SB20250502250
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Division by zero (CVE-ID: CVE-2025-37768)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a division by zero error within the smu7_fan_ctrl_set_fan_speed_rpm() function in drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu7_thermal.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/3cdd02cb70682d7d205ca6dc02a4d1eb76758d24
- https://git.kernel.org/stable/c/5fc4fb54f6f064c25bfbbfd443aa861d3422dd4c
- https://git.kernel.org/stable/c/7c246a05df51c52fe0852ce56ba10c41e6ed1f39
- https://git.kernel.org/stable/c/8e9c4f8d197d5709c75effa5d58e80b4fa01981a
- https://git.kernel.org/stable/c/9e4f1e21fe7b93a8ef57db433071266c2590e260
- https://git.kernel.org/stable/c/b0742a709be7979c7a480772046a1f36d09dab00
- https://git.kernel.org/stable/c/be0fffc4152aac4f0291ed2d793f3cfee788449d
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.181