CVE-2026-46161

md/raid10: fix divide-by-zero in setup_geo() with zero far_copies

State: Published
Severity: Not scored
Published: May 28, 2026
Updated: Oct 15, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix divide-by-zero in setup_geo() with zero far_copies

setup_geo() extracts near_copies (nc) and far_copies (fc) from the user-provided layout parameter without checking for zero. When fc=0 with the "improved" far set layout selected, 'geo->far_set_size = disks / fc' triggers a divide-by-zero.

Validate nc and fc immediately after extraction, returning -1 if either is zero.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	475901aff15841fb0a81e7546517407779a9b061 to before 0b43a70394ce492274e67463326be03e0a9897c5Affected 475901aff15841fb0a81e7546517407779a9b061 to before c716ab3034f84f8a6c226814247b8c5ac9f95da1Affected 475901aff15841fb0a81e7546517407779a9b061 to before 553e32adfa1a96b217651139a3f8c3b92b9984acAffected 475901aff15841fb0a81e7546517407779a9b061 to before 4af2e558e6fdfb972c61350653fd55d1f62b60a5Affected 475901aff15841fb0a81e7546517407779a9b061 to before 9d8e03b9a2b1e8ce5c198bf3a409a629f4d02cdaAffected 475901aff15841fb0a81e7546517407779a9b061 to before 913d556e4bd1b56ed822815655b82c7bb54edc51Affected 475901aff15841fb0a81e7546517407779a9b061 to before f9ddb621b2325eb69c95692958daf2bab4dea2c4Affected 475901aff15841fb0a81e7546517407779a9b061 to before 9aa6d860b0930e2f72795665c42c44252a558a0cAffected
LinuxLinux	3.9Affected before 3.9Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.88 through 6.12.Not affected 6.18.30 through 6.18.Not affected 7.0.7 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

475901aff15841fb0a81e7546517407779a9b061 to before 0b43a70394ce492274e67463326be03e0a9897c5Affected
475901aff15841fb0a81e7546517407779a9b061 to before c716ab3034f84f8a6c226814247b8c5ac9f95da1Affected
475901aff15841fb0a81e7546517407779a9b061 to before 553e32adfa1a96b217651139a3f8c3b92b9984acAffected
475901aff15841fb0a81e7546517407779a9b061 to before 4af2e558e6fdfb972c61350653fd55d1f62b60a5Affected
475901aff15841fb0a81e7546517407779a9b061 to before 9d8e03b9a2b1e8ce5c198bf3a409a629f4d02cdaAffected
475901aff15841fb0a81e7546517407779a9b061 to before 913d556e4bd1b56ed822815655b82c7bb54edc51Affected
475901aff15841fb0a81e7546517407779a9b061 to before f9ddb621b2325eb69c95692958daf2bab4dea2c4Affected
475901aff15841fb0a81e7546517407779a9b061 to before 9aa6d860b0930e2f72795665c42c44252a558a0cAffected

LinuxLinux

3.9Affected
before 3.9Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.88 through 6.12.*Not affected
6.18.30 through 6.18.*Not affected
7.0.7 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.