Bug 2516405 (CVE-2026-72394) - CVE-2026-72394 kernel: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero
Summary: CVE-2026-72394 kernel: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation ...
Keywords:
Status: NEW
Alias: CVE-2026-72394
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-15 06:10 UTC by OSIDB Bzimport
Modified: 2026-08-19 15:16 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-15 06:10:44 UTC
In the Linux kernel, the following vulnerability has been resolved:

hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero

Sashiko reports:

In the aspeed-g6-pwm-tacho driver, the aspeed_tach_val_to_rpm() function
calculates the fan RPM using the tachometer value. However, it does not
check if the tachometer value is zero before performing the division.

If the hardware reports a tachometer value of 0 (which can happen due to
an extremely fast pulse, a stuck edge, or a hardware glitch), the
calculated tach_div evaluates to 0. The subsequent call to do_div() with
tach_div as the divisor triggers a divide-by-zero exception, leading to
a kernel panic.

Check the divisor against zero to fix the problem.


Note You need to log in before you can comment on or make changes to this bug.