CVE-2026-31603

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A division by zero occurs in the ps to hz() function. This happens because hw sm750 crtc set mode() calls ps to hz() without verifying that the pixclock variable is non-zero. An attacker can trigger this issue by passing a zero pixclock via 'FBIOPUT VSCREENINFO'.

Recommendations Reject zero pixclock values in the lynxfb ops check var() function.