Riskcovery

CVE-2026-98722

mtd: block2mtd: Fix divide error when erase_size is zero

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: block2mtd: Fix divide error when erase_size is zero

The erase size is parsed from the "block2mtd" module parameter and can be set to zero. add_device() then evaluates

if (size % erase_size)

with a zero divisor, which triggers a divide error:

divide error: 0000 [#1] PREEMPT SMP PTI RIP: 0010:add_device drivers/mtd/devices/block2mtd.c:296 [inline] RIP: 0010:block2mtd_setup2+0x592/0xda0 drivers/mtd/devices/block2mtd.c:459 Call Trace: block2mtd_setup+0x27/0xe0 drivers/mtd/devices/block2mtd.c:476 param_attr_store+0x214/0x310 kernel/params.c:589 module_attr_store+0x65/0x90 kernel/params.c:904 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345 ...

Reject a zero erase size before performing the modulo operation so the existing "erasesize must be a divisor of device size" error path reports the invalid argument and frees the device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before c8004de07739fa9a39e310e859384f1458d7d076Affected
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before 7ad5287e58d7aa1a848105f119e6c5b00446882fAffected
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before fd73c079abc58e10183a4db4dc9dc5012db17476Affected
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before bff83b723e93acc788bd690dc4bc1f6f4356c35bAffected
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before 826170a49ca1315af6b293a02200585b1e2186d9Affected
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before a991c28066e7ba4da7450bb04478849f7ac6a14aAffected
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before 21d0f05989bf0d5cef57b467a7fa4feefbd7236aAffected
  • ea6d833a3fddcd1d60414d48f34c7f4fbe88608f to before b5965c4221165045e19736794ca5f48ae3d67142Affected
LinuxLinux
  • 3.15Affected
  • before 3.15Not affected
  • 5.10.273 through 5.10.*Not affected
  • 5.15.224 through 5.15.*Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.