Division by Zero Vulnerability in Linux Kernel Network Module

CVE-2025-38719

What is CVE-2025-38719?

A division by zero vulnerability exists in the Linux kernel network module, specifically in the hbg_get_queue_used_num() function. When the network port is inactive, the ring queue length may register as zero, triggering a potential division by zero error when this function is called through debugfs. A recent patch has been implemented to mitigate this risk by ensuring that the function returns zero if the queue length is detected as zero. This enhancement improves the stability and integrity of the network stack in the Linux operating system.

References