Division by Zero in Linux Kernel Media Driver

Publication date: 2026-05-06

Last updated on: 2026-05-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: media: ccs: Avoid possible division by zero Calculating maximum M for scaler configuration involves dividing by MIN_X_OUTPUT_SIZE limit register's value. Albeit the value is presumably non-zero, the driver was missing the check it in fact was. Fix this.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-06

Last Modified

2026-05-11

Generated

2026-07-07

AI Q&A

2026-05-06

EPSS Evaluated

2026-07-05

NVD

CVE-2026-43182

EUVD

EUVD-2026-27742

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.2 (inc) to 6.6.128 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.75 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.16 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.6 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.165 (exc)
linux	linux_kernel	From 3.5 (inc) to 5.15.202 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-369	The product divides a value by zero.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's media subsystem, specifically in the ccs driver. It involves a missing check for a division by zero condition when calculating the maximum M value for scaler configuration. The calculation divides by the value of the MIN_X_OUTPUT_SIZE limit register, which was assumed to be non-zero, but the driver did not verify this assumption, potentially leading to a division by zero error.

Impact Analysis

If exploited, this vulnerability could cause a division by zero error in the Linux kernel's media driver, which may lead to system instability or crashes. This could affect the reliability of media processing on affected systems.

Hi! I’m here to help you understand CVE-2026-43182. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70