Division by Zero Vulnerability in STMicroelectronics STM32 Drivers

CVE-2025-38126

What is CVE-2025-38126?

A vulnerability in the STMicroelectronics STM32 Linux kernel drivers occurs when the ptp_rate value is incorrectly set to 0. This arises from the failure to correctly retrieve the clk_ptp_rate value after querying from the device-tree. As a result, during PTP initialization, this zero value can trigger a division by zero error in the kernel, potentially leading to system instability. Implementing a check before configuring timestamping can prevent this issue and improve overall system robustness. Additional logs can help in diagnosing similar problems.

References