Strix
56.3K

CVE-2026-72414

UnknownEPSS 0.22%

Last modified

CVE-2026-72414 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycle_time argument to future_base_time(). Very small period values may become zero after the conversion, which can lead to a division by zero in future_base_time(). Round zero pin_duration up to 1 tick so that the smallest unsupported periods use the minimum non-zero hardware duration instead of passing zero to future_base_time().. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycle_time argument to future_base_time(). Very small period values may become zero after the conversion, which can lead to a division by zero in future_base_time(). Round zero pin_duration up to 1 tick so that the smallest unsupported periods use the minimum non-zero hardware duration instead of passing zero to future_base_time().

Metrics

EPSS Probability
0.22%

12.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 747e5eb31d59d047972a0dab03e5430fe4264332, < aaf446099ca497c8d9a8e511fedf5d0e547bf8ec; >= 747e5eb31d59d047972a0dab03e5430fe4264332, < 201dcbbfb27f3db85c8cf125a75f3164a83ceb32; >= 747e5eb31d59d047972a0dab03e5430fe4264332, < 9952291db7125b8a62bf19800b93dcac81fc70c0; >= 747e5eb31d59d047972a0dab03e5430fe4264332, < fc62bfd30d30af07356f0f7121c826e1e753582f; >= 747e5eb31d59d047972a0dab03e5430fe4264332, < 28d13a89a211cc07caeef32069eaa847131b7351; >= 747e5eb31d59d047972a0dab03e5430fe4264332, < 410629528067029096dba7ad7bc49e4a5e92708d; >= 747e5eb31d59d047972a0dab03e5430fe4264332, < 09efce96c909dff1a9317ec3714b7ddb4751b7af; >= 747e5eb31d59d047972a0dab03e5430fe4264332, < aee5836273b07b439fb245fb43930664d8b78518
LinuxLinux5.7

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72414?
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycle_time argument to future_base_time(). Very small period values may become zero after the conversion, which can lead to a division by zero in future_base_time(). Round zero pin_duration up to 1 tick so that the smallest unsupported periods use the minimum non-zero hardware duration instead of passing zero to future_base_time().
How severe is CVE-2026-72414?
Severity scoring for CVE-2026-72414 is pending analysis. The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72414?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72414?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST