PT-2026-34955 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31603

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A division by zero occurs in the ps to hz() function. This happens because hw sm750 crtc set mode() calls ps to hz() without verifying that the pixclock variable is non-zero. An attacker can trigger this issue by passing a zero pixclock via 'FBIOPUT VSCREENINFO'.

Recommendations Reject zero pixclock values in the lynxfb ops check var() function.

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-31603

ECHO-EA3D-DCE9-7049

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://git.kernel.org/stable/c/2f640c6043aeab31a2f607d7605271860c3b11df · Patch
• https://cve.org/CVERecord?id=CVE-2026-31603 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31603 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31603 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31603 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31603 · Vendor Advisory
• https://git.kernel.org/stable/c/daf6733bd7c4c5015b431739ac29b0e29021096b · Patch
• https://git.kernel.org/stable/c/75a1621e4f91310673c9acbcbb25c2a7ff821cd3 · Patch
• https://git.kernel.org/stable/c/779412e0e391fd4a0d12e1d1adaa7bf043de62d7 · Patch
• https://git.kernel.org/stable/c/6144895a4335a2491c282931f1f2fa610b86339f · Patch
• https://ubuntu.com/security/CVE-2026-31603 · Vendor Advisory
• https://git.kernel.org/stable/c/1412ba36597a82e928f20047f41d6c6582dafe8a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31603 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-31577 · Note