Skip to main content

Linux Kernel EUVDEUVD-2026-25498

| CVE-2026-31605 MEDIUM
Divide By Zero (CWE-369)
2026-04-24 Linux GHSA-5j7x-34ch-2fxf
Denial Of Service Linux
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local framebuffer device access (AV:L, PR:L) sufficient to trigger kernel panic; impact is availability-only with no scope change or data exposure.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Analysis Generated
Jul 24, 2026 - 02:54 vuln.today
CVSS changed
Apr 29, 2026 - 19:37 NVD
5.5 (MEDIUM)
Patch released
Apr 29, 2026 - 19:36 nvd
Patch available
Patch available
Apr 24, 2026 - 16:16 EUVD
EUVD ID Assigned
Apr 24, 2026 - 15:00 euvd
EUVD-2026-25498
CVE Published
Apr 24, 2026 - 14:42 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide by zero error"), we also need to prevent that same crash from happening in the udlfb driver as it uses pixclock directly when dividing, which will crash.

AnalysisAI

Divide-by-zero crash in the Linux kernel's udlfb (USB DisplayLink framebuffer) driver allows a local low-privileged user to trigger a kernel panic via the FBIOPUT_VSCREENINFO ioctl when pixclock is zero. The flaw, classified CWE-369, mirrors an identical class of defect previously corrected in the fb_pm2fb driver (commit 19f953e74356). Patched kernel versions are available across multiple stable branches; no public exploit or active exploitation has been identified at time of analysis.

Technical ContextAI

The udlfb driver implements framebuffer support for USB DisplayLink-connected external displays within the Linux kernel fbdev subsystem. When userspace calls the FBIOPUT_VSCREENINFO ioctl to configure virtual screen parameters, the driver uses the pixclock field directly as a denominator in a pixel-clock calculation without a zero-guard check. If pixclock is zero, the kernel executes an integer divide-by-zero, resulting in an unhandled exception and kernel panic. CWE-369 (Divide By Zero) precisely describes this root cause: missing input validation on an arithmetic operand at a kernel-level trust boundary. Affected CPEs confirm the scope is the mainline Linux kernel (cpe:2.3:a:linux:linux). The fix pattern is identical to what was applied in commit 19f953e74356 for fb_pm2fb.

RemediationAI

Upgrade to a patched Linux kernel version: 6.12.83, 6.18.24, 6.19.14, or 7.0.1, as documented in the EUVD affected-versions data. The upstream fixes are available across multiple stable branches at git.kernel.org (commits 03797cdee38ef19c87785622d423aabaafb71c5f, 6de048d78f3029744778b7a2891745f3ca7c209a, cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8, afaaaa38579f1252bb42b145f6e88a955c4f73f3, and additional NVD-cited commits). Ubuntu users should apply USN-8488-1 via standard package management. Where immediate patching is not feasible, restrict access to framebuffer device nodes (e.g., chmod 600 /dev/fb* or enforce udev rules limiting group membership) to prevent unprivileged users from issuing ioctls against the device. This workaround does not affect display functionality for authorized users but prevents exploitation by untrusted local accounts. Blacklisting the udlfb module (echo 'blacklist udlfb' >> /etc/modprobe.d/blacklist.conf) is a more aggressive mitigation suitable for systems without USB DisplayLink hardware, with the trade-off of disabling USB external display support entirely.

Same weakness CWE-369 – Divide By Zero

View all
CVE-2017-11720 CRITICAL POC
9.8
CVE-2012-0207 HIGH POC
7.5
CVE-2017-7598 HIGH POC
7.8
CVE-2016-3623 HIGH POC
7.5
CVE-2023-3896 HIGH POC
7.8
CVE-2023-1127 HIGH POC
7.8
CVE-2023-0512 HIGH POC
7.8
CVE-2021-29600 HIGH POC
7.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

EUVD-2026-25498 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy