CVE-2026-98722mtd: block2mtd: Fix divide error when erase_size is zero
- —Not scoredno CVSS score yet
- 0.18%Exploitation in 30 daysEPSS · top 93% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erase_size is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. add_device() then evaluates if (size % erase_size) with a zero divisor, which triggers a divide error: divide error: 0000 [#1] PREEMPT SMP PTI RIP: 0010:add_device drivers/mtd/devices/block2mtd.c:296 [inline] RIP: 0010:block2mtd_setup2+0x592/0xda0 drivers/mtd/devices/block2mtd.c:459 Call Trace: block2mtd_setup+0x27/0xe0 drivers/mtd/devices/block2mtd.c:476 param_attr_store+0x214/0x310 kernel/params.c:589 module_attr_store+0x65/0x90 kernel/params.c:904 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345 ... Reject a zero erase size before performing the modulo operation so the existing "erasesize must be a divisor of device size" error path reports the invalid argument and frees the device.
Timeline
ID reserved
By Linux
- 23 days later
· 23 days later
Published
- 12 days later
· 12 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.18% · top 93% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < c8004de07739fa9a39e310e859384f1458d7d076
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < 7ad5287e58d7aa1a848105f119e6c5b00446882f
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < fd73c079abc58e10183a4db4dc9dc5012db17476
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < bff83b723e93acc788bd690dc4bc1f6f4356c35b
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < 826170a49ca1315af6b293a02200585b1e2186d9
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < a991c28066e7ba4da7450bb04478849f7ac6a14a
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < 21d0f05989bf0d5cef57b467a7fa4feefbd7236a
- affected ea6d833a3fddcd1d60414d48f34c7f4fbe88608f – < b5965c4221165045e19736794ca5f48ae3d67142
- affected 3.15
- unaffected < 3.15
- unaffected 5.10.273 – ≤ 5.10.*
- unaffected 5.15.224 – ≤ 5.15.*
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.160 – ≤ 6.6.*
- unaffected 6.12.113 – ≤ 6.12.*
- unaffected 6.18.56 – ≤ 6.18.*
- unaffected 7.2.10 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References8
- https://git.kernel.org/stable/c/c8004de07739fa9a39e310e859384f1458d7d076 (opens in a new tab)
- https://git.kernel.org/stable/c/7ad5287e58d7aa1a848105f119e6c5b00446882f (opens in a new tab)
- https://git.kernel.org/stable/c/fd73c079abc58e10183a4db4dc9dc5012db17476 (opens in a new tab)
- https://git.kernel.org/stable/c/bff83b723e93acc788bd690dc4bc1f6f4356c35b (opens in a new tab)
- https://git.kernel.org/stable/c/826170a49ca1315af6b293a02200585b1e2186d9 (opens in a new tab)
- https://git.kernel.org/stable/c/a991c28066e7ba4da7450bb04478849f7ac6a14a (opens in a new tab)
- https://git.kernel.org/stable/c/21d0f05989bf0d5cef57b467a7fa4feefbd7236a (opens in a new tab)
- https://git.kernel.org/stable/c/b5965c4221165045e19736794ca5f48ae3d67142 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-103976 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-98722)Record last updated .