Skip to main content

Linux Kernel CVE-2026-43182

| EUVDEUVD-2026-27742 MEDIUM
Divide By Zero (CWE-369)
2026-05-06 Linux GHSA-qfxp-89fr-h27x
Information Disclosure Linux
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local access and low privileges required to reach the camera driver; no confidentiality or integrity impact, only kernel crash availability loss.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Jul 24, 2026 - 01:06 vuln.today
CVSS changed
May 11, 2026 - 21:07 NVD
5.5 (MEDIUM)
Patch available
May 06, 2026 - 13:32 EUVD
CVE Published
May 06, 2026 - 11:27 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

media: ccs: Avoid possible division by zero

Calculating maximum M for scaler configuration involves dividing by MIN_X_OUTPUT_SIZE limit register's value. Albeit the value is presumably non-zero, the driver was missing the check it in fact was. Fix this.

AnalysisAI

Division by zero in the Linux kernel's CCS (Camera Control Set) media driver can be triggered by a local authenticated user, causing a kernel crash and denial of service. The flaw exists in scaler configuration logic where the MAX_M calculation divides by the MIN_X_OUTPUT_SIZE limit register value without first validating it is non-zero. Affected systems must have a CCS-compatible camera device attached and the ccs media driver loaded; no public exploit or active exploitation (CISA KEV) has been identified, and EPSS sits at 0.02%, reflecting very low real-world exploitation probability.

Technical ContextAI

The CCS (SMIA Camera Control Set) driver in the Linux kernel media subsystem (drivers/media/i2c/ccs/) handles configuration of scaler parameters for compatible image sensors. Per EUVD and git references, the vulnerability was introduced at or around commit ccfc97bdb5ae8b8edc55169ac6924e08449836ac, traceable back to Linux 3.5 when the driver was introduced. CWE-369 (Divide by Zero) identifies the root cause: the driver reads MIN_X_OUTPUT_SIZE from a limit register and uses it as a divisor when computing maximum scaler M values, but never validates the register returns a non-zero value. A zero value - whether due to uninitialized hardware state, a malfunctioning sensor, or crafted interaction - triggers a kernel divide-by-zero fault. CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* confirms the affected product is the mainline Linux kernel across multiple stable branches.

RemediationAI

The primary fix is to upgrade the Linux kernel to a patched stable release: 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.16, 6.19.6, or 7.0. Upstream fix commits are available at https://git.kernel.org/stable/c/b6e0529c300e44153fc6f3b565e28163caf1f031, https://git.kernel.org/stable/c/9aae0f31d37a8facd25e37c0f0709ea08de83802, and related stable-tree commits. Ubuntu users should apply the update referenced in USN-8492-1. As a compensating control where immediate patching is not possible, systems that do not require CCS camera functionality can unload or blacklist the ccs kernel module (e.g., add 'blacklist ccs' to /etc/modprobe.d/blacklist.conf); note this disables all CCS-compatible camera hardware. No other targeted workarounds are available given the flaw is within kernel driver logic.

Same weakness CWE-369 – Divide By Zero

View all
CVE-2017-11720 CRITICAL POC
9.8
CVE-2012-0207 HIGH POC
7.5
CVE-2017-7598 HIGH POC
7.8
CVE-2016-3623 HIGH POC
7.5
CVE-2023-3896 HIGH POC
7.8
CVE-2023-1127 HIGH POC
7.8
CVE-2023-0512 HIGH POC
7.8
CVE-2021-29600 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

CVE-2026-43182 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy