What’s Vulnerable › Vulnerabilities
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-09-11 · updated 2026-10-19
- Weakness: CWE-369
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() The function divides number of online CPUs by num_core_siblings, and later checks the divider by zero. This implies a possibility to get and divide-by-zero runtime error. Fix it by moving the check prior to division. This also helps to save one indentation level.
Affected products
- Debian Linux: 11.0
- Linux kernel: from 4.8 before 5.4.297; from 5.5 before 5.10.241; from 5.11 before 5.15.190; from 5.16 before 6.1.149; from 6.2 before 6.6.103; from 6.7 before 6.12.43 — fixed in 5.10.241, 5.15.190, 5.4.297, 6.1.149, 6.12.43, 6.15.11
How to fix
Upgrade to a fixed version: Linux kernel 5.10.241, 5.15.190, 5.4.297, 6.1.149. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/1a7cf828ed861de5be1aff99e10f114b363c19d3
- https://git.kernel.org/stable/c/31d0599a23efdbfe579bfbd1eb8f8c942f13744d
- https://git.kernel.org/stable/c/4b4317b0d758ff92ba96f4e448a8992a6fe607bf
- https://git.kernel.org/stable/c/59f7d2138591ef8f0e4e4ab5f1ab674e8181ad3a
- https://git.kernel.org/stable/c/89fdac333a17ed990b41565630ef4791782e02f5
- https://git.kernel.org/stable/c/9b05e91afe948ed819bf87d7ba0fccf451ed79a6
- https://git.kernel.org/stable/c/9bba1a9994c523b44db64f63b564b4719ea2b7ef
- https://git.kernel.org/stable/c/9d3211cb61a0773a2440d0a0698c1e6e7429f907
- https://git.kernel.org/stable/c/ac53f377393cc85156afdc90b636e84e544a6f96
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html
Get alerted when CVE-2025-39742 or the next vulnerability affects your stack