Medium 5.5Published Apr 24, 2026

CVE-2026-31618fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Updated under an hour ago (Oct 28, 2026, 5:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide by zero error"), we also need to prevent that same crash from happening in the udlfb driver as it uses pixclock directly when dividing, which will crash.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2f207e46c62688bb7eb4e3feaf9a0d94020fb0c9; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6c05191598eca87a87329b3f6e4a0825775f09cf; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 59bde9e0930efef1286768cb65fc78d5e5267f93; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 859a239d58a812b61267d9944b701affe6a6244e; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 53cb4e79a07124d2ebe502983c29800104080b47; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fc386daa6846551a88d338ba9864fc2812cd9030; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6567d3e1aaadfebf44ce7dc9ea2630323cd4c736; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 63dfb0b4741f46d65b667c4275132b3d1966acc8; and 1 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.12.1 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; from 7.0 before 7.0.1; 2.6.12; 2.6.12; 2.6.12; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/2f207e46c62688bb7eb4e3feaf9a0d94020fb0c9
https://git.kernel.org/stable/c/6c05191598eca87a87329b3f6e4a0825775f09cf
https://git.kernel.org/stable/c/59bde9e0930efef1286768cb65fc78d5e5267f93
https://git.kernel.org/stable/c/859a239d58a812b61267d9944b701affe6a6244e	patch
https://git.kernel.org/stable/c/53cb4e79a07124d2ebe502983c29800104080b47	patch
https://git.kernel.org/stable/c/fc386daa6846551a88d338ba9864fc2812cd9030	patch
https://git.kernel.org/stable/c/6567d3e1aaadfebf44ce7dc9ea2630323cd4c736	patch
https://git.kernel.org/stable/c/63dfb0b4741f46d65b667c4275132b3d1966acc8	patch
https://git.kernel.org/stable/c/8f98b81fe011e1879e6a7b1247e69e06a5e17af2	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.