Division by zero in Linux kernel - CVE-2026-31767
Published: May 2, 2026
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a divide-by-zero error in the i915 dsi driver when determining display timing values in command mode. A local user can trigger driver loading on a system using the affected display configuration to cause a denial of service.
The issue occurs on some machines when the adjusted htotal becomes so small that line_time_us is calculated as zero.
Affected software
Ubuntu
Anolis OS
bpftool
python3-perf
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel
kernel-debug
kernel-debug-devel
kernel-devel
kernel-headers
linux (Ubuntu package)
linux-fips (Ubuntu package)
linux-hwe-6.8 (Ubuntu package)
linux-ibm (Ubuntu package)
linux-oracle-6.8 (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-aws-6.8 (Ubuntu package)
linux-aws (Ubuntu package)
linux-raspi (Ubuntu package)
linux-azure-fde (Ubuntu package)
linux-azure-fde-6.8 (Ubuntu package)
linux-azure (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-gcp-fips (Ubuntu package)
How to mitigate CVE-2026-31767
bpftool - update to 6.6.102-7
python3-perf - update to 6.6.102-7
perf - update to 6.6.102-7
kernel-tools-libs-devel - update to 6.6.102-7
kernel-tools-libs - update to 6.6.102-7
kernel-tools - update to 6.6.102-7
kernel - update to 6.6.102-7
kernel-debug - update to 6.6.102-7
kernel-debug-devel - update to 6.6.102-7
kernel-devel - update to 6.6.102-7
kernel-headers - update to 6.6.102-7
linux (Ubuntu package) - addressed in versions 6.8.0-136.136, 6.8.0-1046.50, 6.8.0-1059.67, 6.8.0-1064.72, 6.8.0-1064.72~22.04.1, 6.8.1-1056.57, 6.8.1-1056.57~22.04.2
linux-fips (Ubuntu package) - addressed in versions 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61
linux-hwe-6.8 (Ubuntu package) - update to 6.8.0-136.136~22.04.1
linux-ibm (Ubuntu package) - addressed in versions 6.8.0-1030.31, 6.8.0-1033.34, 6.8.0-1061.62, 6.8.0-1061.62~22.04.1
linux-oracle-6.8 (Ubuntu package) - update to 6.8.0-1058.61~22.04.1
linux-nvidia (Ubuntu package) - addressed in versions 6.8.0-1059.62, 6.8.0-1059.62.1, 6.8.0-1059.62~22.04.1
linux-aws-6.8 (Ubuntu package) - addressed in versions 6.8.0-1061.64+fips1, 6.8.0-1061.64~22.04.1
linux-aws (Ubuntu package) - update to 6.8.0-1061.64+1
linux-raspi (Ubuntu package) - addressed in versions 6.8.0-1061.65, 6.8.0-2050.52
linux-azure-fde (Ubuntu package) - update to 6.8.0-1062.69
linux-azure-fde-6.8 (Ubuntu package) - update to 6.8.0-1062.69~22.04.1
linux-azure (Ubuntu package) - addressed in versions 6.8.0-1063.71, 6.8.0-1063.71~22.04.1
linux-azure-fips (Ubuntu package) - update to 6.8.0-1063.71+fips2
linux-gcp-fips (Ubuntu package) - update to 6.8.0-1064.72+fips1
External References
Related Security Bulletins
- Division by zero in Linux kernel i915 display driver
- Ubuntu update for linux
- Ubuntu update for linux-gcp-fips
- Ubuntu update for linux-oracle-6.8
- Ubuntu update for linux-fips
- Ubuntu update for linux-nvidia
- Ubuntu update for linux-azure-fde-6.8
- Ubuntu update for linux-azure-fips
- Ubuntu update for linux-azure-fde
- Ubuntu update for linux-azure
- Ubuntu update for linux-aws
- Ubuntu update for linux-hwe-6.8
- Ubuntu update for linux-aws-6.8
- Ubuntu update for linux-ibm
- Anolis OS update for kernel:6.6
- Ubuntu update for linux-raspi