Medium 5.5Published Apr 24, 2026

CVE-2026-31605fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Updated under an hour ago (Oct 27, 2026, 11:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide by zero error"), we also need to prevent that same crash from happening in the udlfb driver as it uses pixclock directly when dividing, which will crash.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	59277b679f8b5ce594e367759256668eba652d0d builds before 9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564; from 59277b679f8b5ce594e367759256668eba652d0d before fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5; 59277b679f8b5ce594e367759256668eba652d0d builds before 828ce54b27de93bd9c67991bca5a2c76c76742de; from 59277b679f8b5ce594e367759256668eba652d0d before cce24f70090e0decb597b88bc52e8ef8efed6105; 59277b679f8b5ce594e367759256668eba652d0d builds before 03797cdee38ef19c87785622d423aabaafb71c5f; 59277b679f8b5ce594e367759256668eba652d0d builds before 6de048d78f3029744778b7a2891745f3ca7c209a; from 59277b679f8b5ce594e367759256668eba652d0d before cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8; from 59277b679f8b5ce594e367759256668eba652d0d before afaaaa38579f1252bb42b145f6e88a955c4f73f3; and 1 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.34 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; from 7.0 before 7.0.1	NVD

References

References

https://git.kernel.org/stable/c/9981de9fb5ae0d3d6bc5ff5ca63350c2a3cdc564
https://git.kernel.org/stable/c/fd50ab7dd4ee5bbb4aebffa76ae18484b03a8ea5
https://git.kernel.org/stable/c/828ce54b27de93bd9c67991bca5a2c76c76742de
https://git.kernel.org/stable/c/cce24f70090e0decb597b88bc52e8ef8efed6105	patch
https://git.kernel.org/stable/c/03797cdee38ef19c87785622d423aabaafb71c5f	patch
https://git.kernel.org/stable/c/6de048d78f3029744778b7a2891745f3ca7c209a	patch
https://git.kernel.org/stable/c/cccbf9b7fdab48ce4feb69c24f7f928aa8e4e8b8	patch
https://git.kernel.org/stable/c/afaaaa38579f1252bb42b145f6e88a955c4f73f3	patch
https://git.kernel.org/stable/c/a31e4518bec70333a0a98f2946a12b53b45fe5b9	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.