CVE-2026-31605

MEDIUM

fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Title source: cna

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide by zero error"), we also need to prevent that same crash from happening in the udlfb driver as it uses pixclock directly when dividing, which will crash.

References (9)

Core 9

Core References

https://git.kernel.org/stable/c/9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564

https://git.kernel.org/stable/c/fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5

https://git.kernel.org/stable/c/828ce54b27de93bd9c67991bca5a2c76c76742de

https://git.kernel.org/stable/c/cce24f70090e0decb597b88bc52e8ef8efed6105

https://git.kernel.org/stable/c/03797cdee38ef19c87785622d423aabaafb71c5f

https://git.kernel.org/stable/c/6de048d78f3029744778b7a2891745f3ca7c209a

https://git.kernel.org/stable/c/cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8

https://git.kernel.org/stable/c/afaaaa38579f1252bb42b145f6e88a955c4f73f3

https://git.kernel.org/stable/c/a31e4518bec70333a0a98f2946a12b53b45fe5b9

Scores

CVSS v3 5.5

EPSS 0.0013

EPSS Percentile 2.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-369

Status published

Products (34)

linux/Kernel 2.6.34 - 5.10.258linux

linux/Kernel 5.11.0 - 5.15.209linux

linux/Kernel 5.16.0 - 6.1.175linux

linux/Kernel 6.13.0 - 6.18.24linux

linux/Kernel 6.19.0 - 6.19.14linux

linux/Kernel 6.2.0 - 6.6.136linux

linux/Kernel 6.20.0 - 7.0.1linux

linux/Kernel 6.7.0 - 6.12.83linux

Linux/Linux < 2.6.34

Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 03797cdee38ef19c87785622d423aabaafb71c5f

... and 24 more

Published Apr 24, 2026

Tracked Since Apr 24, 2026