Impact
A division by zero can occur in the Linux kernel’s watchdog driver for the rzv2h platform when clk_get_rate() returns 0. The resulting panic brings the entire system down, causing a loss of availability. The vulnerability does not directly expose secrets or alter system state, but a reboot or loss of service can have a significant impact on mission‑critical workloads.
Affected Systems
All Linux kernel installations that include the rzv2h watchdog driver may be affected. No specific kernel version is listed, but any release that contains the vulnerable code path before the recent patch is potentially exposed. The fix is referenced in several kernel commits and is present in the latest kernel source tree.
Risk and Exploitability
The vulnerability has a CVSS score of 5.5, indicating moderate severity. The EPSS score is < 1%, implying low likelihood of exploitation. It is not listed in CISA KEV, so no known active exploits exist. Potential exploitation would trigger a kernel panic by activating the watchdog when the clock rate is zero. Based on the description, it is inferred that an attacker would need local access to manipulate the clock or trigger the watchdog, but no publicly documented exploit exists.
OpenCVE Enrichment