CVE-2026-72394

Received Received - Intake

Divide-by-Zero in Aspeed G6 PWM Tachometer Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspeed-g6-pwm-tacho driver, the aspeed_tach_val_to_rpm() function calculates the fan RPM using the tachometer value. However, it does not check if the tachometer value is zero before performing the division. If the hardware reports a tachometer value of 0 (which can happen due to an extremely fast pulse, a stuck edge, or a hardware glitch), the calculated tach_div evaluates to 0. The subsequent call to do_div() with tach_div as the divisor triggers a divide-by-zero exception, leading to a kernel panic. Check the divisor against zero to fix the problem.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72394

EUVD

EUVD-2026-59293

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's aspeed-g6-pwm-tach driver. It involves a divide-by-zero error in the fan RPM calculation function. If the hardware reports a tachometer value of zero due to a glitch or fast pulse, the function attempts to divide by zero, causing a kernel panic.

Detection Guidance

This vulnerability is specific to the Linux kernel's aspeed-g6-pwm-tach driver and may cause a kernel panic if a tachometer value of 0 is reported. Detection involves checking the kernel version and driver status. Use 'uname -a' to check the kernel version and 'lsmod | grep aspeed_g6_pwm_tach' to verify if the vulnerable driver is loaded.

Impact Analysis

This vulnerability can cause a system crash (kernel panic) if the affected driver encounters a zero tachometer value. This leads to sudden system unavailability and potential data loss or service disruption.

Compliance Impact

This vulnerability causes a kernel panic due to a divide-by-zero error in the Linux kernel's hwmon driver. It does not directly affect compliance with standards like GDPR or HIPAA, as those focus on data protection and privacy rather than system stability or hardware driver issues.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch the vulnerability. If an update is not immediately available, consider disabling the aspeed-g6-pwm-tach driver if it is not required. Monitor kernel logs for divide-by-zero errors using 'dmesg | grep divide-by-zero'.

Hi! I’m here to help you understand CVE-2026-72394. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70