CVE-2026-68356
Last modified
CVE-2026-68356 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clk_get_rate() can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdt_freq as a divisor directly in airoha_wdt_probe() to compute max_timeout and in airoha_wdt_get_timeleft() to compute the remaining time, which results in a division by zero. Add a check for wdt_freq == 0 in probe and return -EINVAL with dev_err_probe() to prevent the division by zero and provide a diagnostic message..
Description
In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clk_get_rate() can return 0 when the clock provider is not properly configured or the clock is unmanaged. The driver uses wdt_freq as a divisor directly in airoha_wdt_probe() to compute max_timeout and in airoha_wdt_get_timeleft() to compute the remaining time, which results in a division by zero. Add a check for wdt_freq == 0 in probe and return -EINVAL with dev_err_probe() to prevent the division by zero and provide a diagnostic message.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 3cf67f3769b8227ca75ca7102180a2e270ee01aa, < 8681e5addf7171602616e256a09057697dcc75ca; >= 3cf67f3769b8227ca75ca7102180a2e270ee01aa, < 57c3f5bd5be008cd5b4ff6a45b7cb90f5ca45a37; >= 3cf67f3769b8227ca75ca7102180a2e270ee01aa, < bcfcd7619f277842430d197556463b401b839ee9 |
| Linux | Linux | 6.13 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-68356?
How severe is CVE-2026-68356?
How do I fix CVE-2026-68356?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68350In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68351In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68352In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68353In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68354In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68355In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68357In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68358In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68359In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68360In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68361In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68362In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-68356?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
