PT-2026-32349 · Linux · Linux Kernel

Published 2026-04-13 · Updated 2026-05-20 · CVE-2026-31423

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A divide-by-zero error exists in the rtsc min() function within the concave-curve intersection path. The m2sm() function converts a u32 slope to a u64 scaled value; for large inputs, this result can reach 2^32. The rtsc min() function stores the difference of two such u64 values in a u32 variable dsm and uses it as a divisor. When the difference is exactly 2^32, truncation results in zero, leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-31423

ECHO-E1A5-0BE2-BDF0

OESA-2026-2232

OESA-2026-2235

OESA-2026-2236

Affected Products

Linux Kernel

References · 36

• https://nvd.nist.gov/vuln/detail/CVE-2026-31602 · Security Note
• https://git.kernel.org/stable/c/25b6821884713a31e2b49fb67b0ebd765b33e0a9 · Patch
• https://osv.dev/vulnerability/OESA-2026-2232 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31423 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-31423 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31680 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31423 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31423 · Vendor Advisory
• https://git.kernel.org/stable/c/ab1ff5890c7354afc7be56502fcfbd61f3b7ae4f · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31423 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31423 · Vendor Advisory
• https://git.kernel.org/stable/c/d0aefec1b1a1ba2c1d251028dc2c4e5b4ce1fea5 · Patch
• https://osv.dev/vulnerability/OESA-2026-2236 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31423 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31407 · Security Note