The kernel watchdog driver for RTD119x contains a flaw where the clock rate function may return zero, leading to a division by zero and resulting in a kernel panic. This flaw allows the system to crash, causing loss of availability and potentially exposing the machine to further exploitation through denial of service. The vulnerability is identified as a division by zero arithmetic error.

The issue affects the Linux kernel’s RTD119x watchdog driver. All Linux kernel releases that include this driver are potentially impacted, as no specific version range is provided in the advisory. Users running kernel images that contain this driver without the latest patch should be considered at risk.

The EPSS score is < 1% (0.00209) and the vulnerability is not listed in the CISA KEV catalog, indicating no widespread exploitation. The CVSS score is 5.5, indicating moderate severity primarily affecting availability due to a division by zero panic. The likely attack vector is local, as an attacker would need access to the kernel’s watchdog interface or the ability to trigger the clock rate read function. A local attacker could intentionally cause the kernel to panic, leading to a denial-of-service condition. Given the absence of public exploitation data, the immediate risk is primarily tied to the potential for local denial of service rather than remote elevation or data breach.