CVE-2026-72414

A flaw was found in the Linux kernel's net: dsa: sja1105 component. This vulnerability occurs when processing specific timing parameters, where very small user-provided values are converted to zero. This incorrect conversion can lead to a division-by-zero error in the future_base_time() function, which may result in a system crash and a Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact because exploiting it requires local system access to trigger a denial of service on platforms utilizing specialized network switch hardware. Red Hat Enterprise Linux kernels do not enable or ship the affected SJA1105 switch driver by default, leaving standard deployments unexposed to this flaw. Consequently, the issue only presents a risk in custom environments where this specific hardware module has been enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.