CVE-2026-46161 Details
Description
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies setup_geo() extracts near_copies (nc) and far_copies (fc) from the user-provided layout parameter without checking for zero. When fc=0 with the "improved" far set layout selected, 'geo->far_set_size = disks / fc' triggers a divide-by-zero. Validate nc and fc immediately after extraction, returning -1 if either is zero.
A divide-by-zero vulnerability has been identified in the Linux kernel's RAID10 implementation. The issue arises in the setup_geo() function, which extracts near_copies and far_copies from a user-defined layout parameter without validating these values. When far_copies is zero, the calculation for the far set size leads to a divide-by-zero error. This vulnerability affects the Linux kernel RAID10 module in several versions. The problem has been addressed by adding validation to ensure that both near_copies and far_copies are non-zero before proceeding with the calculations.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0b43a70394ce492274e67463326be03e0a9897c5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4af2e558e6fdfb972c61350653fd55d1f62b60a5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/553e32adfa1a96b217651139a3f8c3b92b9984ac | kernel.org | Patch |
| https://git.kernel.org/stable/c/913d556e4bd1b56ed822815655b82c7bb54edc51 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9aa6d860b0930e2f72795665c42c44252a558a0c | kernel.org | Patch |
| https://git.kernel.org/stable/c/9d8e03b9a2b1e8ce5c198bf3a409a629f4d02cda | kernel.org | Patch |
| https://git.kernel.org/stable/c/c716ab3034f84f8a6c226814247b8c5ac9f95da1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f9ddb621b2325eb69c95692958daf2bab4dea2c4 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-369 | Divide By Zero | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.9.1, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.140 >= 6.7, < 6.12.88 >= 6.13, < 6.18.30 >= 6.19, < 7.0.7 3.9 - 3.9 rc2 3.9 rc3 3.9 rc4 3.9 rc5 3.9 rc6 3.9 rc7 3.9 rc8 7.1 rc1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 9, 2026 | Initial Analysis | [email protected] |
| Jun 1, 2026 | CVE Modified | kernel.org |
| May 28, 2026 | New CVE Received | kernel.org |