CVE-2026-72238

Source
https://cve.org/CVERecord?id=CVE-2026-72238
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72238.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72238
Downstream
Published
2026-08-15T05:54:27Z
Modified
2026-08-18T03:31:20Z
Summary
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
Details

In the Linux kernel, the following vulnerability has been resolved:

x86/boot: Validate console=uart8250 baud rate to fix early boot hang

When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early_serial_init().

Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent an early system hang.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72238.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ce0aa5dd20e44372f9617dd67c984f41fcdbed88
Fixed
c1a276a731d02cbb728d0530f327a68728f2d8b0
Fixed
24fbed0a2a45f5f379ef2b53bd2abe58be1142ad
Fixed
efa96a22613b86e05cd81229ce0be411c1a4a79a
Fixed
9a77a7639dfdc3eca417cd37620ce64da79c80c4
Fixed
b4d05032e9af7137eab8f3af2855073f896ca843
Fixed
f7c67c97b37c11f2a95c204092fb8159f2779e8f
Fixed
4dad7e870c7e5178f71b5e1e4f67934b9e8cc207
Fixed
ffa0aa5b625fe0bed7463ac613f8b06676ff4542

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72238.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.36
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72238.json"