{"id":"CVE-2026-31603","state":"PUBLISHED","title":"staging: sm750fb: fix division by zero in ps_to_hz()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: sm750fb: fix division by zero in ps_to_hz()\n\nps_to_hz() is called from hw_sm750_crtc_set_mode() without validating\nthat pixclock is non-zero. A zero pixclock passed via FBIOPUT_VSCREENINFO\ncauses a division by zero.\n\nFix by rejecting zero pixclock in lynxfb_ops_check_var(), consistent\nwith other framebuffer drivers.","publishedAt":"2026-04-24T14:42:26.601Z","updatedAt":"2026-06-14T17:42:44.030Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"124a43550db8a74eef080cd4573a4904efe67029","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"b285a8f3bbb821a93eb37c2740a68ca1d7112a59","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"3300b049693138852a4c6738b5f1194a1ee91ddd","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"779412e0e391fd4a0d12e1d1adaa7bf043de62d7","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"2f640c6043aeab31a2f607d7605271860c3b11df","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"1412ba36597a82e928f20047f41d6c6582dafe8a","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"6144895a4335a2491c282931f1f2fa610b86339f","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"daf6733bd7c4c5015b431739ac29b0e29021096b","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"75a1621e4f91310673c9acbcbb25c2a7ff821cd3","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/sm750fb/sm750.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.1","versionType":"semver"},{"version":"5.10.258","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.209","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.175","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.136","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.83","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.24","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.14","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0.1","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/sm750fb/sm750.c"]}],"references":["https://git.kernel.org/stable/c/124a43550db8a74eef080cd4573a4904efe67029","https://git.kernel.org/stable/c/b285a8f3bbb821a93eb37c2740a68ca1d7112a59","https://git.kernel.org/stable/c/3300b049693138852a4c6738b5f1194a1ee91ddd","https://git.kernel.org/stable/c/779412e0e391fd4a0d12e1d1adaa7bf043de62d7","https://git.kernel.org/stable/c/2f640c6043aeab31a2f607d7605271860c3b11df","https://git.kernel.org/stable/c/1412ba36597a82e928f20047f41d6c6582dafe8a","https://git.kernel.org/stable/c/6144895a4335a2491c282931f1f2fa610b86339f","https://git.kernel.org/stable/c/daf6733bd7c4c5015b431739ac29b0e29021096b","https://git.kernel.org/stable/c/75a1621e4f91310673c9acbcbb25c2a7ff821cd3"],"weaknesses":[],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/31xxx/CVE-2026-31603.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-31603","state":"PUBLISHED","datePublished":"2026-04-24T14:42:26.601Z","dateUpdated":"2026-06-14T17:42:44.030Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-03-09T15:48:24.122Z"},"containers":{"cna":{"title":"staging: sm750fb: fix division by zero in ps_to_hz()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: sm750fb: fix division by zero in ps_to_hz()\n\nps_to_hz() is called from hw_sm750_crtc_set_mode() without validating\nthat pixclock is non-zero. A zero pixclock passed via FBIOPUT_VSCREENINFO\ncauses a division by zero.\n\nFix by rejecting zero pixclock in lynxfb_ops_check_var(), consistent\nwith other framebuffer drivers."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"124a43550db8a74eef080cd4573a4904efe67029","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"b285a8f3bbb821a93eb37c2740a68ca1d7112a59","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"3300b049693138852a4c6738b5f1194a1ee91ddd","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"779412e0e391fd4a0d12e1d1adaa7bf043de62d7","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"2f640c6043aeab31a2f607d7605271860c3b11df","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"1412ba36597a82e928f20047f41d6c6582dafe8a","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"6144895a4335a2491c282931f1f2fa610b86339f","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"daf6733bd7c4c5015b431739ac29b0e29021096b","versionType":"git"},{"version":"81dee67e215b23f0c98182eece122b906d35765a","status":"affected","lessThan":"75a1621e4f91310673c9acbcbb25c2a7ff821cd3","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/sm750fb/sm750.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.1","versionType":"semver"},{"version":"5.10.258","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.209","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.175","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.136","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.83","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.24","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.14","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0.1","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/sm750fb/sm750.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/124a43550db8a74eef080cd4573a4904efe67029"},{"url":"https://git.kernel.org/stable/c/b285a8f3bbb821a93eb37c2740a68ca1d7112a59"},{"url":"https://git.kernel.org/stable/c/3300b049693138852a4c6738b5f1194a1ee91ddd"},{"url":"https://git.kernel.org/stable/c/779412e0e391fd4a0d12e1d1adaa7bf043de62d7"},{"url":"https://git.kernel.org/stable/c/2f640c6043aeab31a2f607d7605271860c3b11df"},{"url":"https://git.kernel.org/stable/c/1412ba36597a82e928f20047f41d6c6582dafe8a"},{"url":"https://git.kernel.org/stable/c/6144895a4335a2491c282931f1f2fa610b86339f"},{"url":"https://git.kernel.org/stable/c/daf6733bd7c4c5015b431739ac29b0e29021096b"},{"url":"https://git.kernel.org/stable/c/75a1621e4f91310673c9acbcbb25c2a7ff821cd3"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-06-14T17:42:44.030Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"5.10.258"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"5.15.209"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.1.175"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.6.136"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.12.83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.18.24"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"6.19.14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"7.0.1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"7.1"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}