CyberSecBulletin
CVE-2026-68106NVD status: Received

Linux: Divide By Zero

Published Updated By the CyberSecBulletin desk

CVE-2026-68106 is a high-severity divide by zero vulnerability in Linux, with a CVSS 3.1 base score of 7.8 out of 10. It can be exploited with local access to the system by an attacker with a low-privileged account, without any action from a user. The record lists versions 004d0453cfef16f056cb7b8bc04f69f19cf9df32, 00ee64910ecf748cc15b23bbcbea472c203ec1e8, 81c9b4921f62d1642b9d775524ae9240e521a5ed as the first without the flaw, so updating Linux to one of those releases or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.13% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update Linux to 004d0453cfef16f056cb7b8bc04f69f19cf9df32 or 00ee64910ecf748cc15b23bbcbea472c203ec1e8 or 81c9b4921f62d1642b9d775524ae9240e521a5ed or 52f9a588296432accf2982f7d258192a37562f4f, whichever matches your release line, or a later version.

Affected products and versions

VendorProductAffected versionsFixed in
LinuxLinuxd38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, 004d0453cfef16f056cb7b8bc04f69f19cf9df32; d38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, 00ee64910ecf748cc15b23bbcbea472c203ec1e8; d38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, 81c9b4921f62d1642b9d775524ae9240e521a5ed; d38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, 52f9a588296432accf2982f7d258192a37562f4f; d38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, a00946b5ab7c25da5685ca9c58f50ff6f43c0fdf; d38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, ffb33d466a68cea3e8a3dbed04d79037a3cbabd1; d38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, be725ab23aa45c11a5afef3e2a9f6d8c084ae5dc; d38ceaf99ed015f2a0b9af3499791bd3a3daae21 up to, but not including, 0c01c811be47e6b146552dd59bfedbea8f09b8f4; and 1 more ranges004d0453cfef16f056cb7b8bc04f69f19cf9df32, 00ee64910ecf748cc15b23bbcbea472c203ec1e8, 81c9b4921f62d1642b9d775524ae9240e521a5ed, 52f9a588296432accf2982f7d258192a37562f4f, a00946b5ab7c25da5685ca9c58f50ff6f43c0fdf, ffb33d466a68cea3e8a3dbed04d79037a3cbabd1

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
LocalThe attacker needs local access or must trick a user into running something.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Privileges required
LowA basic user account is enough.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Scored by CNA.

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, width_in_mb or height_in_mb becomes 0, leading to fs_in_mb being 0. This causes a division by zero when calculating num_dpb_buffer in H264 and H264 Perf decode paths. Add validation to reject frames with width < 16 or height < 16 before performing any calculations that depend on these values. V2: Format change - move up all vaiable definitions. V3: Use warn_once to avoid spam. (cherry picked from commit 3e41d26c70b0a459d041cc19482a226c4b7423cb)

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Divide By Zero

The product divides a value by zero.

More Divide By Zero vulnerabilities (CWE-369)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Recent Divide By Zero vulnerabilities

Spotted an error? Tell us.