Strix
56.9K

CVE-2026-72238

UnknownEPSS 0.21%

Last modified

CVE-2026-72238 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early_serial_init(). Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent an early system hang.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early_serial_init(). Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent an early system hang.

Metrics

EPSS Probability
0.21%

11.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < c1a276a731d02cbb728d0530f327a68728f2d8b0; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < 24fbed0a2a45f5f379ef2b53bd2abe58be1142ad; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < efa96a22613b86e05cd81229ce0be411c1a4a79a; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < 9a77a7639dfdc3eca417cd37620ce64da79c80c4; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < b4d05032e9af7137eab8f3af2855073f896ca843; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < f7c67c97b37c11f2a95c204092fb8159f2779e8f; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < 4dad7e870c7e5178f71b5e1e4f67934b9e8cc207; >= ce0aa5dd20e44372f9617dd67c984f41fcdbed88, < ffa0aa5b625fe0bed7463ac613f8b06676ff4542
LinuxLinux2.6.36

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72238?
In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in early_serial_init(). Fall back to DEFAULT_BAUD when the resulting baud rate is 0 to prevent an early system hang.
How severe is CVE-2026-72238?
Severity scoring for CVE-2026-72238 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72238?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72238?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST