CVE-2026-98390
Received
Received - Intake
AMD Node Divide by Zero in Linux Kernel
Vulnerability report for CVE-2026-98390, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/amd_node: Avoid divide by zero on virtualized systems
On a virtualized system, the number of nodes does not have a relationship to
the number of roots. A Xen PVH dom0 can calculate roots_per_node as 0, which
crashes with a divide by zero in:
if (count++ % roots_per_node)
because the underlying topology code on Xen ends up making num_nodes
2 and num_roots 1 and the integer division result is 0.
The issue is seen with Xen, but it could affect other systems.
Set roots_per_node to 1 in this case. Print a firmware bug when this is
performed for non-virtualized systems.
[ bp: Massage commit message. ]
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb |
| Linux | Linux | 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb |
| Linux | Linux | 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb |
| Linux | Linux | c4ad899a33198ab6335732c769835d035e66894a |
| Linux | Linux | 6.17.8 |
| Linux | Linux | 6.18 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
