Divide Error Vulnerability in Linux Kernel Affecting libnvdimm Driver

CVE-2025-38072

What is CVE-2025-38072?

A vulnerability exists in the Linux kernel's libnvdimm driver due to a divide error triggered by faulty CXL memory devices. When a defective CXL memory device returns an incorrectly sized zero Logical Subsystem Area (LSA), it leads to a division by zero error during data initialization. This issue arises from improper handling of the configuration size, which results in the driver attempting to perform mathematical operations with a zero divisor. A fix has been implemented to enhance the validation of the configuration size parameter, preventing the error from occurring and maintaining system stability.

References