{"id":"CVE-2026-31605","state":"PUBLISHED","title":"fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO\n\nMuch like commit 19f953e74356 (\"fbdev: fb_pm2fb: Avoid potential divide\nby zero error\"), we also need to prevent that same crash from happening\nin the udlfb driver as it uses pixclock directly when dividing, which\nwill crash.","publishedAt":"2026-04-24T14:42:28.120Z","updatedAt":"2026-06-14T17:42:46.052Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"828ce54b27de93bd9c67991bca5a2c76c76742de","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"cce24f70090e0decb597b88bc52e8ef8efed6105","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"03797cdee38ef19c87785622d423aabaafb71c5f","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"6de048d78f3029744778b7a2891745f3ca7c209a","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"afaaaa38579f1252bb42b145f6e88a955c4f73f3","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"a31e4518bec70333a0a98f2946a12b53b45fe5b9","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/video/fbdev/udlfb.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.34","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.34","versionType":"semver"},{"version":"5.10.258","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.209","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.175","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.136","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.83","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.24","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.14","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0.1","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/video/fbdev/udlfb.c"]}],"references":["https://git.kernel.org/stable/c/9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564","https://git.kernel.org/stable/c/fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5","https://git.kernel.org/stable/c/828ce54b27de93bd9c67991bca5a2c76c76742de","https://git.kernel.org/stable/c/cce24f70090e0decb597b88bc52e8ef8efed6105","https://git.kernel.org/stable/c/03797cdee38ef19c87785622d423aabaafb71c5f","https://git.kernel.org/stable/c/6de048d78f3029744778b7a2891745f3ca7c209a","https://git.kernel.org/stable/c/cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8","https://git.kernel.org/stable/c/afaaaa38579f1252bb42b145f6e88a955c4f73f3","https://git.kernel.org/stable/c/a31e4518bec70333a0a98f2946a12b53b45fe5b9"],"weaknesses":[],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/31xxx/CVE-2026-31605.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-31605","state":"PUBLISHED","datePublished":"2026-04-24T14:42:28.120Z","dateUpdated":"2026-06-14T17:42:46.052Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-03-09T15:48:24.122Z"},"containers":{"cna":{"title":"fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO\n\nMuch like commit 19f953e74356 (\"fbdev: fb_pm2fb: Avoid potential divide\nby zero error\"), we also need to prevent that same crash from happening\nin the udlfb driver as it uses pixclock directly when dividing, which\nwill crash."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"828ce54b27de93bd9c67991bca5a2c76c76742de","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"cce24f70090e0decb597b88bc52e8ef8efed6105","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"03797cdee38ef19c87785622d423aabaafb71c5f","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"6de048d78f3029744778b7a2891745f3ca7c209a","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"afaaaa38579f1252bb42b145f6e88a955c4f73f3","versionType":"git"},{"version":"59277b679f8b5ce594e367759256668eba652d0d","status":"affected","lessThan":"a31e4518bec70333a0a98f2946a12b53b45fe5b9","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/video/fbdev/udlfb.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.34","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.34","versionType":"semver"},{"version":"5.10.258","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.209","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.175","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.136","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.83","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.24","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.14","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0.1","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/video/fbdev/udlfb.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564"},{"url":"https://git.kernel.org/stable/c/fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5"},{"url":"https://git.kernel.org/stable/c/828ce54b27de93bd9c67991bca5a2c76c76742de"},{"url":"https://git.kernel.org/stable/c/cce24f70090e0decb597b88bc52e8ef8efed6105"},{"url":"https://git.kernel.org/stable/c/03797cdee38ef19c87785622d423aabaafb71c5f"},{"url":"https://git.kernel.org/stable/c/6de048d78f3029744778b7a2891745f3ca7c209a"},{"url":"https://git.kernel.org/stable/c/cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8"},{"url":"https://git.kernel.org/stable/c/afaaaa38579f1252bb42b145f6e88a955c4f73f3"},{"url":"https://git.kernel.org/stable/c/a31e4518bec70333a0a98f2946a12b53b45fe5b9"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-06-14T17:42:46.052Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"5.10.258"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"5.15.209"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"6.1.175"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"6.6.136"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"6.12.83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"6.18.24"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"6.19.14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"7.0.1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.34","versionEndExcluding":"7.1"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}