Description
In the Linux kernel, the following vulnerability has been resolved:

watchdog: rzv2h: Avoid division by zero

clk_get_rate() could return 0. Avoid a division by zero panic.
Published: 2026-10-14
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service (kernel panic)
Action: Patch Immediately
AI Analysis

Impact

A division by zero can occur in the Linux kernel’s watchdog driver for the rzv2h platform when clk_get_rate() returns 0. The resulting panic brings the entire system down, causing a loss of availability. The vulnerability does not directly expose secrets or alter system state, but a reboot or loss of service can have a significant impact on mission‑critical workloads.

Affected Systems

All Linux kernel installations that include the rzv2h watchdog driver may be affected. No specific kernel version is listed, but any release that contains the vulnerable code path before the recent patch is potentially exposed. The fix is referenced in several kernel commits and is present in the latest kernel source tree.

Risk and Exploitability

The vulnerability has a CVSS score of 5.5, indicating moderate severity. The EPSS score is < 1%, implying low likelihood of exploitation. It is not listed in CISA KEV, so no known active exploits exist. Potential exploitation would trigger a kernel panic by activating the watchdog when the clock rate is zero. Based on the description, it is inferred that an attacker would need local access to manipulate the clock or trigger the watchdog, but no publicly documented exploit exists.

Generated by OpenCVE AI on October 16, 2026 at 23:46 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Linux kernel update that includes the fix for the division‑by‑zero bug in the rzv2h watchdog driver.
  • If a kernel update is not immediately available, disable the rzv kernel watchdog subsystem to eliminate the vulnerable code path.
  • Ensure firmware or configuration that sets the watchdog’s clock rate does not allow a zero value and monitor system logs for signs of kernel panics.

Generated by OpenCVE AI on October 16, 2026 at 23:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 10 Nov 2026 18:30:00 +0000


Fri, 16 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-369
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Thu, 15 Oct 2026 23:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-368

Thu, 15 Oct 2026 04:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-368

Wed, 14 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: watchdog: rzv2h: Avoid division by zero clk_get_rate() could return 0. Avoid a division by zero panic.
Title watchdog: rzv2h: Avoid division by zero
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-11-10T18:15:13.267Z

Reserved: 2026-09-25T10:25:14.347Z

Link: CVE-2026-98408

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-14T14:17:51.990

Modified: 2026-11-10T19:22:24.417

Link: CVE-2026-98408

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-14T00:00:00Z

Links: CVE-2026-98408 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T19:30:02Z

Weaknesses