mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
CVE-2025-39909 is fixed in 57 products on 1 platform, first by DEBIAN-CVE-2025-39909, released October 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() Patch series "mm/damon: avoid divide-by-zero in DAMON module's parameters application". DAMON's RECLAIM and LRU_SORT modules perform no validation on user-configured parameters during application, which may lead to division-by-zero errors. Avoid the divide-by-zero by adding validation checks when DAMON modules attempt to apply the parameters. This patch (of 2): During the calculation of 'hot_thres' and 'cold_thres', either 'sample_interval' or 'aggr_interval' is used as the divisor, which may lead to division-by-zero errors. Fix it by directly returning -EINVAL when such a case occurs. Additionally, since 'aggr_interval' is already required to be set no smaller than 'sample_interval' in damon_set_attrs(), only the case where 'sample_interval' is zero needs to be checked.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| bpftool-debuginfo · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| bpftool6.12 · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| bpftool6.12-debuginfo · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-debuginfo · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-debuginfo-common-aarch64 · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-debuginfo-common-x86_64 · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-default · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.6.1.160000.2.4 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-devel · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-docs · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-headers · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-libbpf · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-libbpf-debuginfo · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-libbpf-devel · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-libbpf-static · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-livepatch-6.1.155-176.282 · amzn 2023 | 1:1.0-0.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-livepatch-6.12.48-67.114 · amzn 2023 | 1:1.0-0.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel-modules-extra · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-modules-extra-common · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-source · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-syms · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel-tools · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-tools-debuginfo · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-tools-devel · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.6.1 | OPENSUSE-SU-2025:20081-1 | Nov 25, 2025 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 | Nov 25, 2025 |
| kernel6.12 · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-debuginfo · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-debuginfo-common-aarch64 · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-debuginfo-common-x86_64 · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-devel · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-headers · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-libbpf · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-libbpf-debuginfo · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-libbpf-devel · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-libbpf-static · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-modules-extra · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-modules-extra-common · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-tools · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-tools-debuginfo · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| kernel6.12-tools-devel · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| linux · Debian 12.15 (bookworm) | 6.1.153-1 | DEBIAN-CVE-2025-39909 | Oct 1, 2025 |
| linux · Debian 13.5 (trixie) | 6.12.48-1 | DEBIAN-CVE-2025-39909 | Oct 1, 2025 |
| linux · Debian 14 | 6.16.8-1 | DEBIAN-CVE-2025-39909 | Oct 1, 2025 |
| perf · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| perf-debuginfo · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| perf6.12 · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| perf6.12-debuginfo · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| python3-perf · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| python3-perf-debuginfo · amzn 2023 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 | Oct 14, 2025 |
| python3-perf6.12 · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
| python3-perf6.12-debuginfo · amzn 2023 | 1:6.12.48-67.114.amzn2023 | ALAS2023-2025-1227 | Oct 27, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.