CVE-2026-31603

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: sm750fb: fix division by zero in ps_to_hz()

ps_to_hz() is called from hw_sm750_crtc_set_mode() without validating that pixclock is non-zero. A zero pixclock passed via FBIOPUT_VSCREENINFO causes a division by zero.

Fix by rejecting zero pixclock in lynxfb_ops_check_var(), consistent with other framebuffer drivers.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

VendorProductVersions
LinuxLinux>= 81dee67e215b23f0c98182eece122b906d35765a, < 124a43550db8a74eef080cd4573a4904efe67029; >= 81dee67e215b23f0c98182eece122b906d35765a, < b285a8f3bbb821a93eb37c2740a68ca1d7112a59; >= 81dee67e215b23f0c98182eece122b906d35765a, < 3300b049693138852a4c6738b5f1194a1ee91ddd; >= 81dee67e215b23f0c98182eece122b906d35765a, < 779412e0e391fd4a0d12e1d1adaa7bf043de62d7; >= 81dee67e215b23f0c98182eece122b906d35765a, < 2f640c6043aeab31a2f607d7605271860c3b11df; >= 81dee67e215b23f0c98182eece122b906d35765a, < 1412ba36597a82e928f20047f41d6c6582dafe8a; >= 81dee67e215b23f0c98182eece122b906d35765a, < 6144895a4335a2491c282931f1f2fa610b86339f; >= 81dee67e215b23f0c98182eece122b906d35765a, < daf6733bd7c4c5015b431739ac29b0e29021096b; >= 81dee67e215b23f0c98182eece122b906d35765a, < 75a1621e4f91310673c9acbcbb25c2a7ff821cd3
LinuxLinux4.1

References

Timeline

Published
Apr 24, 2026
Last modified
Nov 11, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-316045.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a refeCVE-2026-316055.5In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like coCVE-2026-316065.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev in use When callinCVE-2026-316079.8In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USCVE-2026-316089.8In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_dirCVE-2026-316099.8In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_bCVE-2026-31617.5IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly CVE-2026-316105.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc TCVE-2026-316118.6In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading sub_auth[2] parse_daclCVE-2026-316127.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_rCVE-2026-316138.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATCVE-2026-316147.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds c