CVE-2026-98390x86/amd_node: Avoid divide by zero on virtualized systems
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate roots_per_node as 0, which crashes with a divide by zero in: if (count++ % roots_per_node) because the underlying topology code on Xen ends up making num_nodes 2 and num_roots 1 and the integer division result is 0. The issue is seen with Xen, but it could affect other systems. Set roots_per_node to 1 in this case. Print a firmware bug when this is performed for non-virtualized systems. [ bp: Massage commit message. ]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 14, 2026
- First seen by InfoSec Signals
- Oct 14, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb before 9273a90465d58b82aca4bea71451ef6bee084928; from 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb before 94e984d8858a3228952b02f84e66610961098cc2; from 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb before 72bd92bd8190d7869ecb462649ca40f297822a33; c4ad899a33198ab6335732c769835d035e66894a; from 6.17.8 before 6.18 | CNA record |
References
- https://git.kernel.org/stable/c/9273a90465d58b82aca4bea71451ef6bee084928
- https://git.kernel.org/stable/c/94e984d8858a3228952b02f84e66610961098cc2
- https://git.kernel.org/stable/c/72bd92bd8190d7869ecb462649ca40f297822a33
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.