CVE-2026-99240

The Linux kernel contains a vulnerability in the DAMON (Data Access Monitor) subsystem where a zero damos_quota_goal target value can trigger a division-by-zero error. To resolve this, the handling was moved to the core layer. The fix involves adding a check in damos_commit_quota_goal() to valida...

CVE-2026-89821

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs when the islutlinear function processes a Look-Up Table LUT with a single entry, triggering a division-by-zero error. This error causes the kernel to crash, leading to a Denial of Service DoS for the syste...

CVE-2026-98919

A flaw was found in the Linux kernel's Intel Xe graphics driver. Improper calculation handling and missing zero-value checks during graphics idle delay configuration can lead to integer overflows or a division-by-zero error. Under certain hardware initialization states or driver operations, this...

CVE-2026-99121

A flaw was found in the Linux kernel's IPv4 networking component. A race condition in the fibrebalance function can cause a division-by-zero error when routing configurations change concurrently during route rebalancing. A local user or concurrent network event can trigger this flaw, causing the...

CVE-2026-59959 SAIL: WebP decoder division by zero through malformed animated canvas metadata

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or ANMF frame...

CVE-2026-59959 SAIL: WebP decoder division by zero through malformed animated canvas metadata

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or ANMF frame...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146319 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good (CENTOS7:CLSA-2026:1792770102)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770102 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps functi...

CLSA-2026-1792769449 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46469: fix division by zero in qtdemuxparsetrak when an MP4 signals 0 audio channels - CVE-2026-46470: fix division by zero in qtdemux audio sample description parsing when an MP4 signals 0 audio channels...

CLSA-2026-1792769310 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

CLSA-2026-1792768971 gstreamer1-plugins-good: Fix of CVE-2026-46470

CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.15. It stems from the adjustidledly function within the drm/xe drivers, which fails to handle division by zero when timestampbase is set to 0. Additionally, there are a u32 overflow and a loop that decrements maxcnt during the...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1792769449)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792769449 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps...

CVE-2026-98722

A flaw was found in the Linux kernel's block2mtd driver. The driver fails to validate that the erase size module parameter is non-zero before performing a division operation during device initialization. A local user with privileges to modify kernel module parameters can exploit this vulnerabilit...

CVE-2026-98672

A flaw was found in the Linux kernel's STM32 Analog-to-Digital Converter ADC driver. When an ADC conversion fails or returns a zero value, subsequent calculation on the channel data can trigger a division by zero. A local user could exploit this vulnerability to crash the system, leading to a...

ROS-20261022-73-0011

The vulnerability in freerdp3 is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0083

Vulnerability in the ecamdevreadmediatype function of the RDP client FreeRDP: A division by zero occurs in the client before a reverse call to the HAL camera function is made, allowing an attacker to trigger a service failure on the client side...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142521 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792421874)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792421874 advisory. - A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage in the MagickCore/colorspace...

CVE-2026-112054

A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulti...