CVE-2025-37937

What it actually does

A divide-by-zero occurs in dib8000_set_dds() when dib8000_read32() returns zero, triggering UBSAN warnings or kernel instability in the media DVB driver.

Why it matters to the business

Potential system instability or denial of service on Linux systems with affected DVB hardware, with low exploitation likelihood but requiring timely patching to avoid operational disruptions in media-related workloads.

How an attack unfolds

An attacker with local access on a system using the dib8000 driver crafts input that causes dib8000_read32() to return zero, leading to division by zero during tuning operations; context from related privilege escalation campaigns suggests possible chaining for kernel-level impact though EPSS remains low.

How to fix it

Apply kernel patches or upgrade to fixed package versions including firefox (Ubuntu:20.04:LTS) to 126.0+build2-0ubuntu0.20.04.1 and thunderbird (Ubuntu:20.04:LTS) to 1:115.11.0+build2-0ubuntu0.20.04.1; rebuild with UBSAN disabled or apply the divide-by-zero guard in dib8000_set_dds().

How to confirm the fix worked

Recompile kernel with UBSAN enabled and confirm absence of the objtool warning for dib8000_tune(); verify dib8000_read32() zero return is explicitly handled before division.

Typical attack path

1. Obtain local user access on target Linux system
2. Trigger loading of dib8000 DVB frontend module
3. Invoke dib8000_tune() path that calls dib8000_set_dds()
4. Force dib8000_read32() to return zero
5. Induce divide-by-zero fault

How to detect it

Search kernel logs for UBSAN divide-by-zero warnings referencing dib8000_set_dds or dib8000_tune; inspect for unexpected module loads or tuning failures in media subsystems.

What your security team should do

• Prioritize patching systems with DVB hardware using the listed fixed package versions
• Monitor for related privilege escalation activity given threat actor mentions
• Audit custom kernel builds for similar input validation gaps
• Review EPSS trend for any upward movement indicating rising interest