{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-38072",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-38072",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-06-18T09:33:48.666Z",
    "updatedAt": "2026-05-11T21:20:43.703Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "libnvdimm/labels: Fix divide error in nd_label_data_init()",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibnvdimm/labels: Fix divide error in nd_label_data_init()\n\nIf a faulty CXL memory device returns a broken zero LSA size in its\nmemory device information (Identify Memory Device (Opcode 4000h), CXL\nspec. 3.1, 8.2.9.9.1.1), a divide error occurs in the libnvdimm\ndriver:\n\n Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI\n RIP: 0010:nd_label_data_init+0x10e/0x800 [libnvdimm]\n\nCode and flow:\n\n1) CXL Command 4000h returns LSA size = 0\n2) config_size is assigned to zero LSA size (CXL pmem driver):\n\ndrivers/cxl/pmem.c:             .config_size = mds->lsa_size,\n\n3) max_xfer is set to zero (nvdimm driver):\n\ndrivers/nvdimm/label.c: max_xfer = min_t(size_t, ndd->nsarea.max_xfer, config_size);\n\n4) A subsequent DIV_ROUND_UP() causes a division by zero:\n\ndrivers/nvdimm/label.c: /* Make our initial read size a multiple of max_xfer size */\ndrivers/nvdimm/label.c: read_size = min(DIV_ROUND_UP(read_size, max_xfer) * max_xfer,\ndrivers/nvdimm/label.c-                 config_size);\n\nFix this by checking the config size parameter by extending an\nexisting check.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "2bd4a938d2eda96ab7288b8fa5aae84a1de8c4ca"
            },
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "396c46d3f59a18ebcc500640e749f16e197d472b"
            },
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f49c337037df029440a8390380dd35d2cf5924d3"
            },
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "db1aef51b8e66a77f76b1250b914589c31a0a0ed"
            },
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ea3d95e05e97ea20fd6513f647393add16fce3b2"
            },
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1d1e1efad1cf049e888bf175a5c6be85d792620c"
            },
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e14347f647ca6d76fe1509b6703e340f2d5e2716"
            },
            {
              "version": "7d47aad4570e5e6e9a8162bb417ca9b74132f27c",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ef1d3455bbc1922f94a91ed58d3d7db440652959"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.20",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.20"
            },
            {
              "version": "5.4.294",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.238",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.185",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.141",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.93",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.31",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.14.9",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.14.*"
            },
            {
              "version": "6.15",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}