Riskcovery

CVE-2025-21874

dm-integrity: Avoid divide by zero in table status in Inline mode

State
Published
Severity
Not scored
Published
Mar 27, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: Avoid divide by zero in table status in Inline mode

In Inline mode, the journal is unused, and journal_sectors is zero.

Calculating the journal watermark requires dividing by journal_sectors, which should be done only if the journal is configured.

Otherwise, a simple table query (dmsetup table) can cause OOPS.

This bug did not show on some systems, perhaps only due to compiler optimization.

On my 32-bit testing machine, this reliably crashes with the following:

: Oops: divide error: 0000 [#1] PREEMPT SMP : CPU: 0 UID: 0 PID: 2450 Comm: dmsetup Not tainted 6.14.0-rc2+ #959 : EIP: dm_integrity_status+0x2f8/0xab0 [dm_integrity] ...

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fb0987682c629c1d2c476f35f6fde405a5e304a4 to before 22c6f577b3cb184857b440ae5e5916f6c9e7021dAffected
  • fb0987682c629c1d2c476f35f6fde405a5e304a4 to before 06d9895f265282e939a8933bb18de82eba2b4ddaAffected
  • fb0987682c629c1d2c476f35f6fde405a5e304a4 to before 7fb39882b20c98a9a393c244c86b56ef6933cff8Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.18 through 6.12.*Not affected
  • 6.13.6 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.