CVE-2026-31605
mediumIn the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 (…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide by zero error"), we also need to prevent that same crash from happening in the udlfb driver as it uses pixclock directly when dividing, which will crash.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-04-24 15:16
Modified: 2026-11-11 23:10
NVD status: Modified
Last synced 3 hours ago
Verified against the source API 2026-11-11 23:12 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥2.6.34 <6.6.136, ≥6.7 <6.12.83, ≥6.13 <6.18.24, ≥6.19 <6.19.14, ≥7.0 <7.0.1
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/03797cdee38ef19c87785622d423aabaafb71c5f
Patch / mitigation: https://git.kernel.org/stable/c/6de048d78f3029744778b7a2891745f3ca7c209a
Patch / mitigation: https://git.kernel.org/stable/c/a31e4518bec70333a0a98f2946a12b53b45fe5b9
Patch / mitigation: https://git.kernel.org/stable/c/afaaaa38579f1252bb42b145f6e88a955c4f73f3
Patch / mitigation: https://git.kernel.org/stable/c/cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8
Patch / mitigation: https://git.kernel.org/stable/c/cce24f70090e0decb597b88bc52e8ef8efed6105
References
- https://git.kernel.org/stable/c/03797cdee38ef19c87785622d423aabaafb71c5f 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/6de048d78f3029744778b7a2891745f3ca7c209a 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/828ce54b27de93bd9c67991bca5a2c76c76742de 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/a31e4518bec70333a0a98f2946a12b53b45fe5b9 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/afaaaa38579f1252bb42b145f6e88a955c4f73f3 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/cce24f70090e0decb597b88bc52e8ef8efed6105 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-11-11 23:12 UTC · record ↗