CVE-2026-98722

In the Linux kernel, the following vulnerability has been resolved:

mtd: block2mtd: Fix divide error when erase size is zero

The erase size is parsed from the "block2mtd" module parameter and can be set to zero. add device() then evaluates

if (size % erase size)

with a zero divisor, which triggers a divide error:

divide error: 0000 [#1] PREEMPT SMP PTI RIP: 0010:add device drivers/mtd/devices/block2mtd.c:296 [inline] RIP: 0010:block2mtd setup2+0x592/0xda0 drivers/mtd/devices/block2mtd.c:459 Call Trace: block2mtd setup+0x27/0xe0 drivers/mtd/devices/block2mtd.c:476 param attr store+0x214/0x310 kernel/params.c:589 module attr store+0x65/0x90 kernel/params.c:904 kernfs fop write iter+0x3a4/0x540 fs/kernfs/file.c:345 ...

Reject a zero erase size before performing the modulo operation so the existing "erasesize must be a divisor of device size" error path reports the invalid argument and frees the device.