CVE-2026-98390

Source
https://cve.org/CVERecord?id=CVE-2026-98390
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98390.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98390
Downstream
Published
2026-10-14T13:25:54Z
Modified
2026-10-16T02:47:57Z
Summary
x86/amd_node: Avoid divide by zero on virtualized systems
Details

In the Linux kernel, the following vulnerability has been resolved:

x86/amd_node: Avoid divide by zero on virtualized systems

On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate roots_per_node as 0, which crashes with a divide by zero in:

if (count++ % roots_per_node)

because the underlying topology code on Xen ends up making num_nodes 2 and num_roots 1 and the integer division result is 0.

The issue is seen with Xen, but it could affect other systems.

Set roots_per_node to 1 in this case. Print a firmware bug when this is performed for non-virtualized systems.

[ bp: Massage commit message. ]

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98390.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0a4b61d9c2e496b5f0a10e29e355a1465c8738bb
Fixed
9273a90465d58b82aca4bea71451ef6bee084928
Fixed
94e984d8858a3228952b02f84e66610961098cc2
Fixed
72bd92bd8190d7869ecb462649ca40f297822a33
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.17.8
Fixed
6.18
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c4ad899a33198ab6335732c769835d035e66894a

Affected versions

v6.*
v6.17.10
v6.17.11
v6.17.12
v6.17.13
v6.17.8
v6.17.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98390.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98390.json"