CVE-2026-31618

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide by zero error"), we also need to prevent that same crash from happening in the udlfb driver as it uses pixclock directly when dividing, which will crash.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2f207e46c62688bb7eb4e3feaf9a0d94020fb0c9; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6c05191598eca87a87329b3f6e4a0825775f09cf; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 59bde9e0930efef1286768cb65fc78d5e5267f93; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 859a239d58a812b61267d9944b701affe6a6244e; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 53cb4e79a07124d2ebe502983c29800104080b47; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < fc386daa6846551a88d338ba9864fc2812cd9030; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6567d3e1aaadfebf44ce7dc9ea2630323cd4c736; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 63dfb0b4741f46d65b667c4275132b3d1966acc8; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 8f98b81fe011e1879e6a7b1247e69e06a5e17af2
LinuxLinux2.6.12

References

Timeline

Published
Apr 24, 2026
Last modified
Nov 11, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-316195.5In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookuCVE-2026-316204.6In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 A maliciCVE-2026-316215.5In the Linux kernel, the following vulnerability has been resolved: bnge: return after auxiliary_device_uninit() in error path When auxiliCVE-2026-316228.8In the Linux kernel, the following vulnerability has been resolved: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler CVE-2026-316235.5In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() A maliCVE-2026-316245.5In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid undefined shift s32tCVE-2026-316255.5In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfCVE-2026-316267.1In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() InitializeCVE-2026-316277.8In the Linux kernel, the following vulnerability has been resolved: i2c: s3c24xx: check the size of the SMBUS message before using it The CVE-2026-316285.5In the Linux kernel, the following vulnerability has been resolved: x86/CPU: Fix FPDSS on Zen1 Zen1's hardware divider can leave, under ceCVE-2026-316298.8In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: add missing return after LLCP_CLOSED checks In nfc_llcp_recCVE-2026-31637.5A vulnerability has been found in SourceCodester Website Link Extractor 1.0. This vulnerability affects the function file_get_contents of th
CVE-2026-31618: Medium severity, CVSS 5.5 | Vulnix