CVE-2026-64236 Details
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCI_I2C_DEFAULT_BUS_FREQ. However, this macro was defined in kHz (100), whereas the device tree property is expected in Hz. The probe function divided the fallback value by 1000, causing integer truncation that resulted in dev->bus_freq = 0. This triggered a deterministic division-by-zero kernel panic when calculating clock dividers later in the probe sequence. Fix this by redefining DAVINCI_I2C_DEFAULT_BUS_FREQ in Hz (100000) to match the expected device tree property unit, allowing the existing division logic to work correctly for both cases.
A division-by-zero vulnerability has been identified in the Linux kernel's I2C Davinci driver. This issue arises when the 'clock-frequency' property is absent from the device tree, causing the driver to revert to a default bus frequency defined in kilohertz. The probe function then incorrectly processes this value, leading to an integer truncation that sets the bus frequency to zero. Consequently, a kernel panic occurs during the subsequent calculation of clock dividers, causing a system crash. The vulnerability affects several versions of the Linux kernel.
The vulnerability has been addressed by redefining the default bus frequency to match the expected device tree property unit, allowing the division logic to function correctly. Users should upgrade to the latest version of the Linux kernel where this fix has been applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/030675aa54cf757769b3db65642433d626b3ed7c | kernel.org | Patch |
| https://git.kernel.org/stable/c/3f43865cb64dd7cb50efae1281a95585617b12a1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9b694bc0e1831cbc5c3bbfd1b156ec719128f7d9 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-369 | Divide By Zero | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.14, < 6.18.35 >= 6.19, < 7.0.12 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 12, 2026 | Initial Analysis | [email protected] |
| Jul 24, 2026 | New CVE Received | kernel.org |