CVE-2026-98722

Source
https://cve.org/CVERecord?id=CVE-2026-98722
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98722.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98722
Downstream
Published
2026-10-18T15:46:58Z
Modified
2026-10-19T02:45:30Z
Summary
mtd: block2mtd: Fix divide error when erase_size is zero
Details

In the Linux kernel, the following vulnerability has been resolved:

mtd: block2mtd: Fix divide error when erase_size is zero

The erase size is parsed from the "block2mtd" module parameter and can be set to zero. add_device() then evaluates

    if (size % erase_size)

with a zero divisor, which triggers a divide error:

divide error: 0000 [#1] PREEMPT SMP PTI RIP: 0010:add_device drivers/mtd/devices/block2mtd.c:296 [inline] RIP: 0010:block2mtd_setup2+0x592/0xda0 drivers/mtd/devices/block2mtd.c:459 Call Trace: block2mtd_setup+0x27/0xe0 drivers/mtd/devices/block2mtd.c:476 param_attr_store+0x214/0x310 kernel/params.c:589 module_attr_store+0x65/0x90 kernel/params.c:904 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345 ...

Reject a zero erase size before performing the modulo operation so the existing "erasesize must be a divisor of device size" error path reports the invalid argument and frees the device.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98722.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ea6d833a3fddcd1d60414d48f34c7f4fbe88608f
Fixed
826170a49ca1315af6b293a02200585b1e2186d9
Fixed
a991c28066e7ba4da7450bb04478849f7ac6a14a
Fixed
21d0f05989bf0d5cef57b467a7fa4feefbd7236a
Fixed
b5965c4221165045e19736794ca5f48ae3d67142

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98722.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.15.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98722.json"