PT-2026-36405 · Linux · Linux Kernel

Groeck · Published 2026-05-01 · Updated 2026-05-06 · CVE-2026-31770

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A divide-by-zero flaw exists in the occ show power 1() function. In case 1 of this function, the accumulator is divided by the update tag variable without verifying if it is zero. If no samples have been collected, such as during early boot when the sensor block is included but not yet updated, update tag remains zero, leading to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-31770

ECHO-762B-BA86-3FC8

Affected Products

Linux Kernel

References · 17

• https://security-tracker.debian.org/tracker/CVE-2026-31770 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31770 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31770 · Vendor Advisory
• https://git.kernel.org/stable/c/bbbefc48f6617cfb738dcff7f44beb50b5dfeb38 · Patch
• https://git.kernel.org/stable/c/37ae8fadc74ed68e5bc364ffd17746d88e449ae3 · Patch
• https://git.kernel.org/stable/c/c7d3712362c8ab8f82f441b649d9e446e7b9aa9d · Patch
• https://git.kernel.org/stable/c/243d55bd3f08cb15eee9d63f4716d4d4cdd760f5 · Patch
• https://git.kernel.org/stable/c/39e2a5bf970402a8530a319cf06122e216ba57b8 · Patch
• https://git.kernel.org/stable/c/2502684b9e835de9a992ec47c3e6c6faabe3858d · Patch
• https://git.kernel.org/stable/c/53e6175756b8c474b6247bbcea0aad3d68357475 · Patch
• https://git.kernel.org/stable/c/7b89ce0c98bf3015f493ca4285b2d1056cd8c733 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31770 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31770 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31770 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31770 · Vendor Advisory