CVE-2025-21898
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 15, 2025
CWE ID 369
Summary
CVE-2025-21898 is a vulnerability affecting the Linux kernel. It lies in the ftrace subsystem, specifically in the function_stat_show function. The issue involves the potential division by zero in this function, which could be triggered if the denominator expression x * (x - 1) * 1000 mod (2^32, 2^64) evaluates to zero. If this happens, the standard deviation computation is skipped. While the vulnerability may not directly lead to a counter overflow, a time overflow is more likely to occur beforehand. This issue has been resolved.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.