CVE-2026-80610
Received Received - Intake

Divide-by-Zero in Linux Kernel ENETC Driver

Vulnerability report for CVE-2026-80610, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_vsi is zero For i.MX94 series, all the standalone ENETCs do not support SR-IOV, so pf->caps.num_vsi is zero. This leads to a divide-by-zero in enetc4_default_rings_allocation() when distributing rings among PF and VFs. Division by zero is undefined behavior in C. On ARM64, the UDIV/SDIV instructions silently return zero rather than raising an exception, so the issue does not cause a visible crash. However, relying on this behavior is incorrect and poses a cross-platform compatibility risk. Add an explicit check for num_vsi == 0 and return early after the PF's rings have been configured.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-28
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a divide-by-zero issue in the Linux kernel's enetc driver, specifically affecting i.MX94 series devices. It occurs when num_vsi is zero, which is the case for standalone ENETCs that do not support SR-IOV. The function enetc4_default_rings_allocation() attempts to divide by num_vsi, leading to undefined behavior. While ARM64 silently returns zero, this is incorrect and poses cross-platform risks.

Detection Guidance

This vulnerability can be detected by checking if the Linux kernel version is affected and if the system uses ENETC with SR-IOV disabled. Inspect the kernel log for divide-by-zero errors or check the num_vsi value in the ENETC driver. Commands like 'dmesg | grep -i divide' or 'cat /proc/net/enetc' may help identify issues.

Impact Analysis

The vulnerability could cause undefined behavior in the Linux kernel's network driver, potentially leading to system instability or unexpected behavior. However, on ARM64, it may not crash but could still cause incorrect ring allocations, affecting network performance or functionality.

Mitigation Strategies

Apply the kernel patch that adds an explicit check for num_vsi == 0 in enetc4_default_rings_allocation(). Update the Linux kernel to a version containing the fix. For i.MX94 series, ensure SR-IOV is not enabled on standalone ENETC devices.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80610. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart