CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-37850: pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()

Description

In the Linux kernel, the following vulnerability has been resolved:

pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()

With CONFIG_COMPILE_TEST && !CONFIG_HAVE_CLK, pwm_mediatek_config() has a
divide-by-zero in the following line:

do_div(resolution, clk_get_rate(pc->clk_pwms[pwm->hwpwm]));

due to the fact that the !CONFIG_HAVE_CLK version of clk_get_rate()
returns zero.

This is presumably just a theoretical problem: COMPILE_TEST overrides
the dependency on RALINK which would select COMMON_CLK. Regardless it's
a good idea to check for the error explicitly to avoid divide-by-zero.

Fixes the following warning:

drivers/pwm/pwm-mediatek.o: warning: objtool: .text: unexpected end of section

[ukleinek: s/CONFIG_CLK/CONFIG_HAVE_CLK/]

Classification

CVE ID: CVE-2025-37850

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.8% (scored less or equal to compared to others)

EPSS Date: 2025-06-07 (when was this score calculated)

References

Timeline

2025-05-09 07:40:14 UTC
CVE

pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()