CVE-2026-72238

Not scored yetLast modified Aug 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/boot: Validate console=uart8250 baud rate to fix early boot hang

When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early_serial_init().

Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent an early system hang.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < c1a276a731d02cbb728d0530f327a68728f2d8b0; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < 24fbed0a2a45f5f379ef2b53bd2abe58be1142ad; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < efa96a22613b86e05cd81229ce0be411c1a4a79a; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < 9a77a7639dfdc3eca417cd37620ce64da79c80c4; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < b4d05032e9af7137eab8f3af2855073f896ca843; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < f7c67c97b37c11f2a95c204092fb8159f2779e8f; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < 4dad7e870c7e5178f71b5e1e4f67934b9e8cc207; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < ffa0aa5b625fe0bed7463ac613f8b06676ff4542
LinuxLinux2.6.36

References

Timeline

Published
Aug 15, 2026
Last modified
Aug 17, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-722399.3In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_ECVE-2026-72247.3A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /adminCVE-2026-72240In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platCVE-2026-72241In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied byCVE-2026-722427.5In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() seCVE-2026-722438.4In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar toCVE-2026-722447.8In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment cannot be honoured ThCVE-2026-72245In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1x_device_parse_dt() erroCVE-2026-722477.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in tuple dedup The "alreaCVE-2026-722489.8In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combinaCVE-2026-722499.8In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP headeCVE-2026-72257.3A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function delete_menu of the fi
CVE-2026-72238: Unscored | Vulnix