Riskcovery

CVE-2026-31605

fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

State
Published
Severity
Not scored
Published
Apr 24, 2026
Updated
Jun 14, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide by zero error"), we also need to prevent that same crash from happening in the udlfb driver as it uses pixclock directly when dividing, which will crash.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 59277b679f8b5ce594e367759256668eba652d0d to before 9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564Affected
  • 59277b679f8b5ce594e367759256668eba652d0d to before fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5Affected
  • 59277b679f8b5ce594e367759256668eba652d0d to before 828ce54b27de93bd9c67991bca5a2c76c76742deAffected
  • 59277b679f8b5ce594e367759256668eba652d0d to before cce24f70090e0decb597b88bc52e8ef8efed6105Affected
  • 59277b679f8b5ce594e367759256668eba652d0d to before 03797cdee38ef19c87785622d423aabaafb71c5fAffected
  • 59277b679f8b5ce594e367759256668eba652d0d to before 6de048d78f3029744778b7a2891745f3ca7c209aAffected
  • 59277b679f8b5ce594e367759256668eba652d0d to before cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8Affected
  • 59277b679f8b5ce594e367759256668eba652d0d to before afaaaa38579f1252bb42b145f6e88a955c4f73f3Affected
  • 59277b679f8b5ce594e367759256668eba652d0d to before a31e4518bec70333a0a98f2946a12b53b45fe5b9Affected
LinuxLinux
  • 2.6.34Affected
  • before 2.6.34Not affected
  • 5.10.258 through 5.10.*Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.136 through 6.6.*Not affected
  • 6.12.83 through 6.12.*Not affected
  • 6.18.24 through 6.18.*Not affected
  • 6.19.14 through 6.19.*Not affected
  • 7.0.1 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.