Riskcovery

CVE-2026-98390

x86/amd_node: Avoid divide by zero on virtualized systems

State
Published
Severity
Not scored
Published
Oct 14, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/amd_node: Avoid divide by zero on virtualized systems

On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate roots_per_node as 0, which crashes with a divide by zero in:

if (count++ % roots_per_node)

because the underlying topology code on Xen ends up making num_nodes 2 and num_roots 1 and the integer division result is 0.

The issue is seen with Xen, but it could affect other systems.

Set roots_per_node to 1 in this case. Print a firmware bug when this is performed for non-virtualized systems.

[ bp: Massage commit message. ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb to before 9273a90465d58b82aca4bea71451ef6bee084928Affected
  • 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb to before 94e984d8858a3228952b02f84e66610961098cc2Affected
  • 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb to before 72bd92bd8190d7869ecb462649ca40f297822a33Affected
  • c4ad899a33198ab6335732c769835d035e66894aAffected
  • 6.17.8 to before 6.18Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.