NetSight
IP …
medium5.5

CVE-2025-21898

In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in function_stat_show() Check whether denominator …

Impact

In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in function_stat_show() Check whether denominator expression x * (x - 1) * 1000 mod {2^32, 2^64} produce zero and skip stddev computation in that case. For now don't care about rec->counter * rec->counter overflow because rec->time * rec->time overflow will likely happen earlier.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16.83 before 3.17
from 4.4.206 before 4.5
from 4.9.209 before 4.10
from 4.14.163 before 4.15
from 4.19.94 before 4.20
from 5.4.9 before 5.4.291

Weakness classification

CWE-369

References