CVE-2025-38126: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability (CVE-2025-38126) was discovered in the Linux kernel affecting the stmmac platform drivers. The issue was disclosed on July 3, 2025, and involves the handling of PTP (Precision Time Protocol) rate configuration in the network subsystem (NVD).

The vulnerability occurs when stmmac platform drivers do not properly handle the clkptprate value after retrieving the default value from the device-tree. Specifically, clkgetrate can return 0, which propagates to the PTP initialization when bringing up the interface, resulting in a division by zero error in the kernel. This affects the stmmacinittstamp_counter function during network interface initialization (NVD).

The vulnerability can lead to a division by zero error in the kernel, potentially causing system crashes or denial of service conditions when initializing network interfaces that use the affected stmmac drivers (NVD).

The vulnerability has been resolved by adding an explicit check for zero values in ptprate before configuring timestamping. Additionally, a duplicate check was removed from stmmacptp_register to streamline the fix (NVD).