CVE-2026-98722

Source
https://cve.org/CVERecord?id=CVE-2026-98722
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98722.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98722
Downstream
AZL (1)
BELL (1)
CLSA (3)
DEBIAN (1)
UBUNTU (1)
Published
2026-10-18T15:46:58Z
Modified
2026-11-01T02:30:16Z
Summary
mtd: block2mtd: Fix divide error when erase_size is zero
Details

In the Linux kernel, the following vulnerability has been resolved:

mtd: block2mtd: Fix divide error when erase_size is zero

The erase size is parsed from the "block2mtd" module parameter and can be set to zero. add_device() then evaluates

    if (size % erase_size)

with a zero divisor, which triggers a divide error:

divide error: 0000 [#1] PREEMPT SMP PTI RIP: 0010:add_device drivers/mtd/devices/block2mtd.c:296 [inline] RIP: 0010:block2mtd_setup2+0x592/0xda0 drivers/mtd/devices/block2mtd.c:459 Call Trace: block2mtd_setup+0x27/0xe0 drivers/mtd/devices/block2mtd.c:476 param_attr_store+0x214/0x310 kernel/params.c:589 module_attr_store+0x65/0x90 kernel/params.c:904 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345 ...

Reject a zero erase size before performing the modulo operation so the existing "erasesize must be a divisor of device size" error path reports the invalid argument and frees the device.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98722.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ea6d833a3fddcd1d60414d48f34c7f4fbe88608f
Fixed
c8004de07739fa9a39e310e859384f1458d7d076
Fixed
7ad5287e58d7aa1a848105f119e6c5b00446882f
Fixed
fd73c079abc58e10183a4db4dc9dc5012db17476
Fixed
bff83b723e93acc788bd690dc4bc1f6f4356c35b
Fixed
826170a49ca1315af6b293a02200585b1e2186d9
Fixed
a991c28066e7ba4da7450bb04478849f7ac6a14a
Fixed
21d0f05989bf0d5cef57b467a7fa4feefbd7236a
Fixed
b5965c4221165045e19736794ca5f48ae3d67142

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98722.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.15.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98722.json"