–no cvss

CVE-2026-68356

watchdog: airoha: Prevent division by zero when clock frequency is zero

Published 2 mo ago · modified 2 mo ago · JSON

CVSS
—
not scored
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 6%
Public exploits
0
none known

Summary

In the Linux kernel, the following vulnerability has been resolved:

watchdog: airoha: Prevent division by zero when clock frequency is zero

clk_get_rate() can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdt_freq as a divisor directly in airoha_wdt_probe() to compute max_timeout and in airoha_wdt_get_timeleft() to compute the remaining time, which results in a division by zero.

Add a check for wdt_freq == 0 in probe and return -EINVAL with dev_err_probe() to prevent the division by zero and provide a diagnostic message.

Exploit prediction (EPSS)

0.17% probability of exploitation in the next 30 days, higher than 6% of all scored CVEs.

Affected products

  • Linux Linux

Classification

Technology feeds
Linux kernel (RSS, critical only)

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.