CVE-2026-68356
Received Received - Intake

Division by Zero in Airoha Watchdog Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clk_get_rate() can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdt_freq as a divisor directly in airoha_wdt_probe() to compute max_timeout and in airoha_wdt_get_timeleft() to compute the remaining time, which results in a division by zero. Add a check for wdt_freq == 0 in probe and return -EINVAL with dev_err_probe() to prevent the division by zero and provide a diagnostic message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68356
EUVD
EUVD-2026-55457

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
airoha watchdog *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a division by zero issue in the Linux kernel's watchdog driver for Airoha devices. It occurs when the clock frequency is zero, which can happen if the clock provider is misconfigured or the clock is unmanaged. The driver uses this frequency as a divisor without checking, leading to a crash.

Detection Guidance

This vulnerability can be detected by checking if the airoha watchdog driver is loaded and if the clock frequency is zero. Look for errors in kernel logs related to division by zero or watchdog probe failures. Commands like dmesg | grep airoha or journalctl -k | grep airoha may help identify issues.

Impact Analysis

If exploited, this vulnerability could cause the system to crash or become unresponsive due to a division by zero error. This may lead to denial of service, disrupting services that rely on the watchdog timer for stability.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. Ensure the clock provider for the airoha watchdog is properly configured to avoid clk_get_rate() returning zero. Monitor kernel logs for watchdog-related errors after applying updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68356. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart