CVE-2026-72394

A flaw was found in the Linux kernel's aspeed-g6-pwm-tach driver. This vulnerability arises when the system attempts to calculate fan rotations per minute (RPM) using a tachometer value of zero, which can occur due to hardware glitches or specific conditions. Without proper validation, this zero value is used in a division, causing a critical error known as a kernel panic. This can lead to a system crash, effectively denying service to legitimate users.

This vulnerability is rated as Moderate severity because triggering the denial of service requires local access and is constrained to systems operating specialized Aspeed AST2600 BMC hardware, without posing a risk to data confidentiality or integrity. Standard Red Hat Enterprise Linux kernel packages do not incorporate the affected driver introduced in newer upstream branches. As a result, default deployments are not exposed to this crash condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.