CVE-2026-72414net: dsa: sja1105: round up PTP perout pin duration
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycle_time argument to future_base_time(). Very small period values may become zero after the conversion, which can lead to a division by zero in future_base_time(). Round zero pin_duration up to 1 tick so that the smallest unsupported periods use the minimum non-zero hardware duration instead of passing zero to future_base_time().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 747e5eb31d59d047972a0dab03e5430fe4264332 before aaf446099ca497c8d9a8e511fedf5d0e547bf8ec; 747e5eb31d59d047972a0dab03e5430fe4264332 builds before 201dcbbfb27f3db85c8cf125a75f3164a83ceb32; from 747e5eb31d59d047972a0dab03e5430fe4264332 before 9952291db7125b8a62bf19800b93dcac81fc70c0; from 747e5eb31d59d047972a0dab03e5430fe4264332 before fc62bfd30d30af07356f0f7121c826e1e753582f; 747e5eb31d59d047972a0dab03e5430fe4264332 builds before 28d13a89a211cc07caeef32069eaa847131b7351; from 747e5eb31d59d047972a0dab03e5430fe4264332 before 410629528067029096dba7ad7bc49e4a5e92708d; 747e5eb31d59d047972a0dab03e5430fe4264332 builds before 09efce96c909dff1a9317ec3714b7ddb4751b7af; from 747e5eb31d59d047972a0dab03e5430fe4264332 before aee5836273b07b439fb245fb43930664d8b78518 | CNA record |
References
- https://git.kernel.org/stable/c/aaf446099ca497c8d9a8e511fedf5d0e547bf8ec
- https://git.kernel.org/stable/c/201dcbbfb27f3db85c8cf125a75f3164a83ceb32
- https://git.kernel.org/stable/c/9952291db7125b8a62bf19800b93dcac81fc70c0
- https://git.kernel.org/stable/c/fc62bfd30d30af07356f0f7121c826e1e753582f
- https://git.kernel.org/stable/c/28d13a89a211cc07caeef32069eaa847131b7351
- https://git.kernel.org/stable/c/410629528067029096dba7ad7bc49e4a5e92708d
- https://git.kernel.org/stable/c/09efce96c909dff1a9317ec3714b7ddb4751b7af
- https://git.kernel.org/stable/c/aee5836273b07b439fb245fb43930664d8b78518
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.