CVE-2026-72238
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early_serial_init(). Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent an early system hang.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
2.6.36
References 8
git.kernel.org
- stable/c/c1a276a731d02cbb728d0530f327a68728f2d8b0
- stable/c/24fbed0a2a45f5f379ef2b53bd2abe58be1142ad
- stable/c/efa96a22613b86e05cd81229ce0be411c1a4a79a
- stable/c/9a77a7639dfdc3eca417cd37620ce64da79c80c4
- stable/c/b4d05032e9af7137eab8f3af2855073f896ca843
- stable/c/f7c67c97b37c11f2a95c204092fb8159f2779e8f
- stable/c/4dad7e870c7e5178f71b5e1e4f67934b9e8cc207
- stable/c/ffa0aa5b625fe0bed7463ac613f8b06676ff4542