CVE-2026-98722
kernel: mtd: block2mtd: Fix divide error when erase_size is zero
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 18, 2026
Updated · October 23, 2026
Description
A flaw was found in the Linux kernel's block2mtd driver. The driver fails to validate that the erase size module parameter is non-zero before performing a division operation during device initialization. A local user with privileges to modify kernel module parameters can exploit this vulnerability by supplying a zero erase size, triggering a division-by-zero error that crashes the kernel and results in a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-369 · Divide By Zero