CVE-2026-72394hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspeed-g6-pwm-tacho driver, the aspeed_tach_val_to_rpm() function calculates the fan RPM using the tachometer value. However, it does not check if the tachometer value is zero before performing the division. If the hardware reports a tachometer value of 0 (which can happen due to an extremely fast pulse, a stuck edge, or a hardware glitch), the calculated tach_div evaluates to 0. The subsequent call to do_div() with tach_div as the divisor triggers a divide-by-zero exception, leading to a kernel panic. Check the divisor against zero to fix the problem.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 7e1449cd15d1096157d1a9923b82e37602fb7eb0 before a3f98bd397398e2d4a7f98e006b5aaf4d54ebdf3; from 7e1449cd15d1096157d1a9923b82e37602fb7eb0 before 898ca04b096b9e4640300eab91468c826a1ec92b; from 7e1449cd15d1096157d1a9923b82e37602fb7eb0 before fb8a5afe6f1f8aa7f19c6dda23d277dd6ae5d9e1; from 7e1449cd15d1096157d1a9923b82e37602fb7eb0 before fe87b8dc67f1b2c64e76a66e78468c533d3c44ca | CNA record |
References
- https://git.kernel.org/stable/c/a3f98bd397398e2d4a7f98e006b5aaf4d54ebdf3
- https://git.kernel.org/stable/c/898ca04b096b9e4640300eab91468c826a1ec92b
- https://git.kernel.org/stable/c/fb8a5afe6f1f8aa7f19c6dda23d277dd6ae5d9e1
- https://git.kernel.org/stable/c/fe87b8dc67f1b2c64e76a66e78468c533d3c44ca
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.