CVE-2026-31423 | Linux Kernel up to 6.1.167/6.6.133/6.12.80/6.18.21/6.19.11 rtsc_min divide by zero

VDB-357152 · CVE-2026-31423 · GCVE-0-2026-31423 LINUX KERNEL UP TO 6.1.167/6.6.133/6.12.80/6.18.21/6.19.11 RTSC_MIN DIVIDE BY ZERO HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 4.6 $0-$5k 2.44+ Summaryinfo A vulnerability described as critical has been identified in Linux Kernel up to 6.1.167/6.6.133/6.12.80/6.18.21/6.19.11. This issue affects the function rtsc_min. Such manipulation leads to divide by zero. This vulnerability is uniquely identified as CVE-2026-31423. No exploit exists. Upgrading the affected component is recommended. Detailsinfo A vulnerability was found in Linux Kernel up to 6.1.167/6.6.133/6.12.80/6.18.21/6.19.11 and classified as critical. Affected by this issue is the function rtsc_min. The manipulation with an unknown input leads to a divide by zero vulnerability. Using CWE to declare the problem leads to CWE-369. The product divides a value by zero. Impacted is availability. CVE summarizes: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() m2sm() converts a u32 slope to a u64 scaled value. For large inputs (e.g. m1=4000000000), the result can reach 2^32. rtsc_min() stores the difference of two such u64 values in a u32 variable `dsm` and uses it as a divisor. When the difference is exactly 2^32 the truncation yields zero, causing a divide-by-zero oops in the concave-curve intersection path: Oops: divide error: 0000 RIP: 0010:rtsc_min (net/sched/sch_hfsc.c:601) Call Trace: init_ed (net/sched/sch_hfsc.c:629) hfsc_enqueue (net/sched/sch_hfsc.c:1569) [...] Widen `dsm` to u64 and replace do_div() with div64_u64() so the full difference is preserved. The advisory is shared for download at git.kernel.org. This vulnerability is handled as CVE-2026-31423 since 03/09/2026. The exploitation is known to be difficult. There are known technical details, but no exploit is available. Upgrading to version 6.1.168, 6.6.134, 6.12.81, 6.18.22 or 6.19.12 eliminates this vulnerability. Applying the patch 25b6821884713a31e2b49fb67b0ebd765b33e0a9/c56f78614e7781aaceca9bd3cb2128bf7d45c3bd/b9e6431cbea8bb1fae8069ed099b4ee100499835/17c1b9807b8a67d676b6dcf749ee932ebaa7f568/d0aefec1b1a1ba2c1d251028dc2c4e5b4ce1fea5/4576100b8cd03118267513cafacde164b498b322 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version. Productinfo Type Operating System Vendor Linux Name Kernel Version 6.1.167 6.6.133 6.12.0 6.12.1 6.12.2 6.12.3 6.12.4 6.12.5 6.12.6 6.12.7 6.12.8 6.12.9 6.12.10 6.12.11 6.12.12 6.12.13 6.12.14 6.12.15 6.12.16 6.12.17 6.12.18 6.12.19 6.12.20 6.12.21 6.12.22 6.12.23 6.12.24 6.12.25 6.12.26 6.12.27 6.12.28 6.12.29 6.12.30 6.12.31 6.12.32 6.12.33 6.12.34 6.12.35 6.12.36 6.12.37 6.12.38 6.12.39 6.12.40 6.12.41 6.12.42 6.12.43 6.12.44 6.12.45 6.12.46 6.12.47 6.12.48 6.12.49 6.12.50 6.12.51 6.12.52 6.12.53 6.12.54 6.12.55 6.12.56 6.12.57 6.12.58 6.12.59 6.12.60 6.12.61 6.12.62 6.12.63 6.12.64 6.12.65 6.12.66 6.12.67 6.12.68 6.12.69 6.12.70 6.12.71 6.12.72 6.12.73 6.12.74 6.12.75 6.12.76 6.12.77 6.12.78 6.12.79 6.12.80 6.18.0 6.18.1 6.18.2 6.18.3 6.18.4 6.18.5 6.18.6 6.18.7 6.18.8 6.18.9 6.18.10 6.18.11 6.18.12 6.18.13 6.18.14 6.18.15 6.18.16 6.18.17 6.18.18 6.18.19 6.18.20 6.18.21 6.19.0 6.19.1 6.19.2 6.19.3 6.19.4 6.19.5 6.19.6 6.19.7 6.19.8 6.19.9 6.19.10 6.19.11 License open-source Website Vendor: https://www.kernel.org/ CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv3info VulDB Meta Base Score: 4.8 VulDB Meta Temp Score: 4.6 VulDB Base Score: 4.8 VulDB Temp Score: 4.6 VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Divide by zero CWE: CWE-369 / CWE-404 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Partially Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: Kernel 6.1.168/6.6.134/6.12.81/6.18.22/6.19.12 Patch: 25b6821884713a31e2b49fb67b0ebd765b33e0a9/c56f78614e7781aaceca9bd3cb2128bf7d45c3bd/b9e6431cbea8bb1fae8069ed099b4ee100499835/17c1b9807b8a67d676b6dcf749ee932ebaa7f568/d0aefec1b1a1ba2c1d251028dc2c4e5b4ce1fea5/4576100b8cd03118267513cafacde164b498b322 Timelineinfo 03/09/2026 CVE reserved 04/13/2026 +34 days Advisory disclosed 04/13/2026 +0 days VulDB entry created 04/13/2026 +0 days VulDB entry last update Sourcesinfo Vendor: kernel.org Advisory: git.kernel.org Status: Confirmed CVE: CVE-2026-31423 (🔒) GCVE (CVE): GCVE-0-2026-31423 GCVE (VulDB): GCVE-100-357152 Entryinfo Created: 04/13/2026 16:03 Changes: 04/13/2026 16:03 (58) Complete: 🔍 Cache ID: 99:451:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸