Skip to main content
← All vulnerabilities
CVE-2026-98390

x86/amd_node: Avoid divide by zero on virtualized systems

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.18, 6.18.53, 7.2.7
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate roots_per_node as 0, which crashes with a divide by zero in: if (count++ % roots_per_node) because the underlying topology code on Xen ends up making num_nodes 2 and num_roots 1 and the integer division result is 0. The issue is seen with Xen, but it could affect other systems. Set roots_per_node to 1 in this case. Print a firmware bug when this is performed for non-virtualized systems. [ bp: Massage commit message. ]

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb · fixed in 9273a90465d58b82aca4bea71451ef6bee084928; From 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb · fixed in 94e984d8858a3228952b02f84e66610961098cc2; From 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb · fixed in 72bd92bd8190d7869ecb462649ca40f297822a33; From 6.17.8 · fixed in 6.18

  • Linux Linux

    6.18

  • KernelLinux

    From 6.18.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7

References 3

git.kernel.org