CVE-2026-72414

The CVE-2026-72414 entry concerns the Linux kernel component net: dsa: sja1105. The issue arises when pin_duration, derived from a user-provided period, is converted to SJA1105 clock ticks and passed as the cycle_time to future_base_time(); very small values can become zero, causing a division by...

CVE-2026-72238 x86/boot: Validate console=uart8250 baud rate to fix early boot hang

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

CVE-2026-72238 x86/boot: Validate console=uart8250 baud rate to fix early boot hang

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

CVE-2026-72238

CVE-2026-72238 affects the Linux kernel in the x86/boot path, where an empty/0/invalid baud rate for uart8250 could lead to a division by zero in early_serial_init() and cause a hang during early boot. The documented fix is to fall back to DEFAULT_BAUD when the computed baud rate is 0. The connec...

EUVD-2026-59137

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

EUVD-2026-59109

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effectivemems, not memsallowed Creating a child cpuset where cpuset.mems is never set leads to a div/0 when a VMA mempolicy with MPOLFRELATIVENODES rebinds in response to a CPU hotplug event...

CVE-2026-72010 cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effectivemems, not memsallowed Creating a child cpuset where cpuset.mems is never set leads to a div/0 when a VMA mempolicy with MPOLFRELATIVENODES rebinds in response to a CPU hotplug event...

CVE-2026-72010 cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effectivemems, not memsallowed Creating a child cpuset where cpuset.mems is never set leads to a div/0 when a VMA mempolicy with MPOLFRELATIVENODES rebinds in response to a CPU hotplug event...

CVE-2026-72010

CVE-2026-72010 — Linux kernel (cgroup/cpuset) memo policy rebinding : A divisive divide-by-zero could occur when rebinding a VMA mempolicy with MPOL_F_RELATIVE_NODES during CPU hotplug if cpuset.mems was never set. The issue arises because the rebind path used cs->mems_allowed (which may have ...

PT-2026-72602

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin duration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycle time argument to future base time. Very small period values may...

PT-2026-72199

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective mems, not mems allowed Creating a child cpuset where cpuset.mems is never set leads to a div/0 when a VMA mempolicy with MPOL F RELATIVE NODES rebinds in response to a CPU hotplug...

PT-2026-72426

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early...

Linux Distros Unpatched Vulnerability : CVE-2026-74504

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: Fix division by zero in initializetimer A userspace-driven ALSA timer SNDUTIMER lets an unprivileged user set the backing sndtimer's hardware...

SUSE CVE-2026-68297

In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and TIPCNLBEARERSET accept user-supplied MTU values but only enforce a minimum bound, not a maximum. When a user sets the MTU to a value exceedin...

Linux Distros Unpatched Vulnerability : CVE-2026-68356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock ...

CVE-2026-68106

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability occurs when processing video frames with invalid dimensions, specifically if the width or height is less than 16. Such malformed input can lead to a division by zero error during video decoding operations. A local...

CVE-2026-68164

A flaw was found in the Linux kernel's DAMON Data Access MONitor subsystem. The damonsetregions function, responsible for setting memory monitoring regions, incorrectly processes unsorted or overlapping input ranges due to a missing validation check. This can lead to unexpected behavior in DAMON...

CVE-2026-68254

A flaw was found in the Linux kernel's drm/i915/vrr component. An attacker could provide a specially crafted Extended Display Identification Data EDID with a zero minimum vertical refresh rate minvfreq. This could lead to a division-by-zero error in the intelvrrcomputevmax function, resulting in ...

CVE-2026-68356

A flaw was found in the Linux kernel's airoha watchdog driver. This vulnerability occurs when the clock frequency is zero, causing the driver to attempt a division by zero. This can lead to a system crash, resulting in a denial of service for the affected system...

CVE-2026-68297

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication module. A local user can exploit this vulnerability by providing a crafted Maximum Transmission Unit MTU value that exceeds the expected limit. This can lead to a division-by-zero error, causing a system crash and...