Bug 2513239 (CVE-2026-68356) - CVE-2026-68356 kernel: watchdog: airoha: Prevent division by zero when clock frequency is zero
Summary: CVE-2026-68356 kernel: watchdog: airoha: Prevent division by zero when clock ...
Keywords:
Status: NEW
Alias: CVE-2026-68356
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-10 12:26 UTC by OSIDB Bzimport
Modified: 2026-08-13 17:50 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-10 12:26:31 UTC
In the Linux kernel, the following vulnerability has been resolved:

watchdog: airoha: Prevent division by zero when clock frequency is zero

clk_get_rate() can return 0 when the clock provider is not properly
configured or the clock is unmanaged. The driver uses wdt_freq as a
divisor directly in airoha_wdt_probe() to compute max_timeout and in
airoha_wdt_get_timeleft() to compute the remaining time, which results
in a division by zero.

Add a check for wdt_freq == 0 in probe and return -EINVAL with
dev_err_probe() to prevent the division by zero and provide a
diagnostic message.


Note You need to log in before you can comment on or make changes to this bug.