CVE-2026-98390: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate roots_per_node as 0, which crashes with a divide by zero in: if (count++ % roots_per_node) because the underlying topology code on Xen ends up making num_nodes 2 and num_roots 1 and the integer division result is 0. The issue is seen with Xen, but it could affect other systems. Set roots_per_node to 1 in this case. Print a firmware bug when this is performed for non-virtualized systems. [ bp: Massage commit message. ]

Засегнати продукти

• Linux Linux: 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb преди 9273a90465d58b82aca4bea71451ef6bee084928; 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb преди 94e984d8858a3228952b02f84e66610961098cc2; 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb преди 72bd92bd8190d7869ecb462649ca40f297822a33; c4ad899a33198ab6335732c769835d035e66894a; 6.17.8 преди 6.18
• Linux Linux: 6.18; преди 6.18; 6.18.53 до 6.18.*; 7.2.7 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98390
• https://nvd.nist.gov/vuln/detail/CVE-2026-98390
• https://git.kernel.org/stable/c/9273a90465d58b82aca4bea71451ef6bee084928
• https://git.kernel.org/stable/c/94e984d8858a3228952b02f84e66610961098cc2
• https://git.kernel.org/stable/c/72bd92bd8190d7869ecb462649ca40f297822a33